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LAN91C96 


ISA/PCMCIA Single-Chip Full Duplex Ethernet 
Controller with Magic Packet 


FEATURES 


«  ISA/PCMCIA Single-Chip Ethernet 
Controller 

= A Subset of Motorola 68000 Bus Interface 
Support 

« Fully Supports Full Duplex Switched 
Ethernet 

= Supports Enhanced Transmit Queue 
Management 


"6K Bytes of On-Chip RAM 

«Supports IEEE 802.3 (ANSI 8802-3) 
Ethernet Standards 

= Automatic Detection of TX/RX Polarity 
Reversal 

= Enhanced Power Management Features 

«= Supports “Magic Packet” Power 
Management Technology 

* Simultasking Early Transmit and Early 
Receive Functions 

=» Enhanced Early Transmit Function 

= Receive Counter for Enhanced Early 
Receive 

=» Hardware Memory Management Unit 

* Optional Configuration via Serial EEPROM 
Interface (Jumperless) 

=» Supports single +5V or +3.3V (for Revisions 
E and Later) VCC Designs 

«= Supports Mixed Voltage External PHY 
Designs’ 

«» Low Power CMOS Design 

* 100 Pin QFP and TQFP (1.0 mm body 
Thickness) Packages 

« Pin Compatible with the LAN91C92 and 
LAN91C94 


" Refer to DESCRIPTION OF PIN 
FUNCTIONS on Page 13 for 5V tolerant pins 


Bus Interface 


Direct Interface to ISA, PCMCIA, and 68000 
Buses with No Wait States 

Flexible Bus Interface 

16 Bit Data and Control Paths 

Fast Access Time (40ns) 

Pipelined Data Path 

Handles Block Word Transfers for any 
Alignment 

High Performance Chained ("Back-to-Back") 
Transmit and Receive 

Pin Compatible with the LAN91C92 (in ISA 
Mode) and the LAN91C94 in Both ISA and 
PCMCIA Modes 

Dynamic Memory Allocation Between 
Transmit and Receive 

Flat Memory Structure for Low CPU 
Overhead 

Buffered Architecture, Insensitive to Bus 
Latencies (No Overruns/Underruns) 
Supports Boot PROM for Diskless ISA 
Applications 


Network Interface 


Integrated 1OBASE-T Transceiver 

Functions: 

- Driver and Receiver 

- Link Integrity Test 

- Receive Polarity Detection and 
Correction 

Integrated AUI Interface 

10 Mb/s Manchester Encoding/Decoding 

and Clock Recovery 

Automatic Retransmission, Bad Packet 

Rejection, and Transmit Padding 

External and Internal Loopback Modes 

Four Direct Driven LEDs for Status/ 

Diagnostics 


Software Drivers 

=» _LAN9000 Drivers for Major Network 
Operating Systems Utilizing ISA or PCMCIA 
Interface 


GENERAL 


The LAN91C96 is a VLSI Ethernet Controller that 
combines ISA, PCMCIA, and Motorola 68000 bus 
interfaces in one chip. LAN91C96 integrates all 
MAC and physical layer functions, as well as the 
packet RAM, needed to implement a_ high 
performance 10BASE-T (twisted pair) node. For 
10BASE5 (thick coax), 10BASE2 (thin coax), and 
10BASE-F (fiber) implementations, the LAN91C96 
interfaces to external transceivers via the provided 
AUI port. Only one additional IC is required for 
most applications. The LAN91C96 comes with 
Full Duplex Switched Ethernet (FDSWE) support 
allowing the controller to provide much higher 
throughput. 6K bytes of RAM is provided to 
support enhanced throughput and compensate for 
any increased system service latencies. The 
controller implements multiple advanced power- 
down modes including Magic Packet to conserve 
power and operate more efficiently. The 
LAN91C96 can directly interface with the ISA, 
PCMCIA, and 68000 buses and deliver no-wait- 
state operation. For ISA and PCMCIA interfaces, 
the LAN91C96 occupies 16 |/0 locations and no 
memory space except for PCMCIA attribute 
memory space. The same I/O space is used for 
both ISA and PCMCIA 


« Software Drivers Compatible with the 
LAN91C92, LAN91C94, LAN91C100FD 
(100 Mb/s), and LAN91C110 (100 Mb/s) 
Controllers in ISA Mode 


" Software Drivers Utilize Full Capability of 32 
Bit Microprocessor 


DESCRIPTION 


operations. Its shared memory is sequentially 
accessed with 40ns access times to any of its 
registers, including its packet memory. DMA 
services are not used by the LAN91C96, virtually 
de-coupling network traffic from local or system 
bus utilization. For packet memory management, 
the LAN91C96 integrates a unique hardware 
Memory Management Unit (MMU) with enhanced 
performance and decreased software overhead 
when compared to ring buffer and linked list 
architectures. The LAN91C96 is portable to 
different CPU and bus platforms due to its flexible 
bus interface, flat memory structure (no pointers), 
and its loosely coupled buffered architecture (not 
sensitive to latency). 


The LAN91C96 is available in 100-pin QFP and 
TQFP (1.0 mm body thickness) packages. The 
low profile TQFP is ideal for mobile applications 
such as PC Card LAN adapters. The LAN91C96 
operates with a single power supply voltage of 
5.0V. Revisions E and later will also operate 
using a single 3.3V power supply. 


OVERVIEW 


A unique architecture allows the LAN91C96 to 
combine high performance, _ flexibility, high 
integration and simple software interface. 


The LAN91C96 incorporates the LAN91C92 
functionality for ISA environments, as well as a 
PCMCIA interface and attribute registers like the 
LAN91C94 It also includes a subset of the 
Motorola 68000 _ interface. Mode selection 
between ISA and PCMCIA is static and is done 
only at the end of a reset. Selection of 68000 
operation mode is performed at power-up. 

The LAN91C96 consists of the same logical I/O 
register structure in ISA and PCMCIA modes. 
However, some of the signals used to access the 
PCMCIA differ from the ISA mode. The MMU 
(Memory Management Unit) architecture used by 
the LAN91C96 combines the simplicity and low 
overhead of fixed areas with the flexibility of linked 
lists providing improved performance over other 
methods. 


Packet reception and _ transmission are 
determined by memory availability. All other 
resources are always available if memory is 
available. To complement this _ flexible 
architecture, bus _ interface functions are 
incorporated in the LAN91C96, as well as a 6144 
byte packet RAM - and serial EEPROM-based 
setup. The user can select or modify 
configuration choices. The LAN91C96 integrates 
most of the 802.3 functionality, incorporating the 
MAC layer protocol, the physical layer encoding 
and decoding functions with the ability to handle 
the AUI interface. For twisted pair networks, 
LAN91C96 integrates the twisted pair transceiver 
as well as the link integrity test functions. 


The LAN91C96 is a true 10BASE-T single chip 
device able to interface to a system or a local bus. 


Support for direct-driven LEDs for installation and 
run-time diagnostics is provided. 802.3 statistics 
are gathered to facilitate network management. 


The LAN91C96 is a single chip Ethernet controller 
designed to be 100% pin and software compatible 
with the LAN91C92 and LAN91C94 in ISA mode. 
Similar to the LAN91C94, the LAN91C96 has 
support necessary for providing a true single chip 
single function PCMCIA Ethernet socket adapter. 
The LAN91C96 incorporates all of the PCMCIA 
registers and signals that interface to the PCMCIA 
bus. 


The LAN91C96 has been designed to support full 
duplex switched Ethernet and provides Fully 
independent transmit and receive operations. 


The LAN91C96_ internal packet memory is 
extended to 6k bytes, and the MMU will continue 
to manage memory in 256 byte pages. The 
increase in memory size accommodates the 
potential for simultaneous transmit and receive 
traffic in some full duplex applications as well as 
support for enhanced performance on systems 
that introduce increased latency. 


The LAN91C96 has the ability to retrieve 
configuration information from a serial EEPROM 
on reset or power-up. In ISA mode, the serial 
EPROM acts as storage of configuration and 
IEEE Ethernet address information compatible 
with the existing LAN91C90, LAN91C92, and 
LAN91C94 ISA Ethernet controllers. In PCMCIA 
mode, the EEPROM function is the same as in 
ISA mode. External Flash ROM is required for CIS 
storage. 


The LAN91C96 offers: 


High integration: 
Single chip controller including: 

- Packet RAM 
- ISA bus interface 
- PCMCIA interface 
- 68000 interface 
- EEPROM interface 
- Encoder/decoder with AUI interface 
- 10BASE-T transceiver 


High performance: 
Chained ("Back-to-back") packet handling 
with no CPU intervention: 
- Queues transmit packets 
- Queues receive packets 
- Stores results in memory along 
with packet 
- Queues interrupts 
- Optional single interrupt upon 
completion of transmit chain 


Fast block move operation for load/unload: 
- CPU sees packet bytes as if stored 
continuously. 
- Handles 16 bit transfers regardless 
of address alignment. 
- Access to packet through fixed 
window. 
Fast bus interface: 
Compatible with ISA type and faster buses. 


Flexibility: 
Flexible packet and header processing: 

- Can be set to Simultasking - Early 
Receive and Transmit modes. 
With enhanced Early Receive 
functions. 

- Can access any byte in the packet. 

- Can immediately remove undesired 
packets from queue. 

- Can move packets from receive to 
transmit queue. 

- Can alter receive processing order 
without copying data. 


- Can discard or enqueue again a 
failed transmission. 


Resource allocation: 
- Memory dynamically allocated for 
transmit and receive. 
- Can automatically release memory 
on successful transmission. 


Configuration: 
ISA: 
- Uses non-volatile jumperless setup 
via serial EEPROM. 


PCMCIA: 
Uses ROM or Flash ROM for attribute 
memory storage and optional serial 
EEPROM for IEEE address storage. 
PCMCIA I/O ignores address lines A4- 
A15 and relies on the PCMCIA host, 
decoding for the slot. 


nROM/nPCMCIA, on LAN91C96, is left 
open with a pullup for ISA mode. This pin 
is sampled at the end of RESET. If 
found low, the LAN91C96 is configured 
for PCMCIA mode. 


Motorola 68000: 
Uses non-volatile jumperless setup via 
serial EEPROM. The device must power 
up in ISA mode with nlIORD and nlOWR 
asserted simultaneously to make the 
controller enter the 68000 mode. 


NOTE: The first write to the 68000 configured 
controller must be a write. 
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PCMCIA CONNECTOR 


nCE1, nCE2, nREG, nWE 
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LAN91C96 
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INTERFACE 
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Serial Eprom 
(ISA-Hy9346) 


SINGLE FUNCTION PCMCIA 
CARD WITH THE LAN91C96 


FIGURE 1 - LAN91C96 SYSTEM BLOCK DIAGRAM 
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FIGURE 2 - SYSTEM DIAGRAM FOR ISA BUS WITH BOOT PROM 
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ISA vs. PCMCIA vs. 68000 PIN REQUIREMENTS 
| FUNCTION | ISA ___—|_PCMCIA_ | _—68000_—| MAX NUMBER OF PINS | 
21 


SYSTEM 
ADDRESS BUS 


SYSTEM RESET RESET 12 

CONTROL BUS BALE nWE 
nlORD nlORD 
nlOWwR nlOWR 
nMEMR nOE 
IOCHRDY nWAIT 
nlOCS16 nlolS16 
nSBHE nCE2 
INTRO nlIREQ 
INTR1 nINPACK 
INTR2 
INTR3 


_ a 
ee a 


CRYSTAL OSC. XTAL1, XTAL2 [XTAL1, XTAL2 |XTAL1, XTAL2 2 
POWER VDD,AVDD | VDD,AVDD | VDD,AVDD [| 9 | 
GROUND GND, AGND_ [| GND, AGND | GND, AGND 


10BASE-T interface | TPERXP TPERXP TPERXP 
TPERXN TPERXN TPERXN 
TPETXP TPETXP TPETXP 
TPETXN TPETXN TPETXN 
TPETXDP TPETXDP TPETXDP 
TPETXDN TPETXDN TPETXDN 


: The bytes connect to the 68000 host processor swapped 
11 


FUNCTION | ISA |. PCMCIA 68000 MAX NUMBER OF PINS 


AUI interface RECP RECN | RECP RECN |} RECP RECN 
COLP COLN |} COLP COLN COLP COLN 
TXP/nCOLL TXP/nCOLL TXP/nCOLL 
TXN/nCRS TXN/nCRS TXN/nCRS 
Pe 


MISC. 
PWRDWN/T PWRDWN/T 
XCLK XCLK 
nXENDEC nXENDEC 
nEN16 nEN16 
nROM nPCMCIA 
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DESCRIPTION OF PIN FUNCTIONS 


TYPE DESCRIPTION 


NROM/ 1/04 with | This pin is sampled at the end of RESET. When this 
nPCMCIA pullup pin is sampled low the LAN91C96 is configured for 
PCMCIA operation and all pin definitions correspond 

to the PCMCIA mode. For ISA operation this pin is 

left open and it is used as a ROM chip select output 

that goes active when nMEMR is low and the address 

bus contains a valid ROM address. In ISA mode the 

LAN91C96 is pin compatible with the LAN91C92 and 


| PINNO. 
TOFP 
93 95 
LAN91C94. To enter the 68000 mode, this pin must 
be in the ISA mode at power up. 


26-28 28,29, AO- Input address lines 0 through 9. 
30-36 30, 32- 
38 
37 39 A10/nFWE | |__| ISA- Input address line 10. 
O04 PCMCIA - Output. Flash Memory Write Enable used 
for programming the attribute memory. Goes active 
low) when WE*=0 and COR2=1. 
39 41 A11/nFCS | 1 | ISA- Input address line 11. 
O04 PCMCIA - Output. Flash Memory Chip Select used to 
access attribute memory. Goes active (low) when 
nREG=0 nCE1=0 and A15=0. 


on even byte accesses. 
52 54 AEN/ ISA - Address enable input. Used as an address 
qualifier. Address decoding is only enabled when 
AEN is low. 
PCMCIA - Attribute memory and IO select input. 
Asserted when the card attribute space or IO space is 
being accessed. 
ISA - Byte High Enable input. Asserted (low) by the 
nCE2 system to indicate a data transfer on the upper data 
byte. 
on odd byte accesses. 
53 55 IOCHRDY/ ISA - Output. Optionally used by the LAN91C96 to 
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| PINNO. 
TQFP TYPE DESCRIPTION 
PCMCIA - Output. Optionally used by the LAN91C96 
to extend host cycles. 


aes 15 1/024 Bidirectional. 16 bit data bus used to access the 
LAN91C96 internal registers. The data bus has weak 
internal pullups. Supports direct connection to the 
system bus without external buffering. In the case of 
a 68000 host processor, the upper byte of the data 
bus must be connected to the lower byte of the 68000 
data bus and the lower byte of the data bus must be 
connected to the upper byte of the 68000 data bus. 
| fee Input. Active high Reset. This input is not considered 
pullup active unless it is active for at least 100ns to filter 
narrow glitches. 
ae BALE/nWE ISA - Input. Address strobe. For systems that require 
68000 — Active high interrupt signal. The INT SEL1-0 
bits in the Configuration register must indicate INTO 
selection. 
ISA - Outputs. Active high interrupt signals. The 
interrupt line selection is determined by the value of 
INT SEL1-0 bits in the Configuration Register. These 


address latching, the falling edge of BALE latches 
INTR1/ ISA - Output. Active high interrupt signal. The 
interrupts are tri-stated when not selected. 


address lines and nSBHE. 
PCMCIA - Write Enable input. Used for writing into 
COR and CSR registers as well as attribute memory 
space. 
ISA - Active high interrupt signal. The interrupt line 
selection is determined by the value of INT SEL1-0 
bits in the Configuration Register. This interrupt is tri- 
stated when not selected. 
nINPACK interrupt line selection is determined by the value of 
INT SEL1-0 bits in the Configuration Register. This 
interrupt is tri-stated when not selected. 
PCMCIA - Output asserted to acknowledge read 
cycles. 
ISA - Outputs. Active high interrupt signals. The 
interrupt line selection is determined by the value of 
INT SEL1-0 bits in the Configuration Register. These 


PCMCIA - Active low interrupt request output. 
interrupts are tri-stated when not selected. 
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| PINNO. 
TQFP TYPE DESCRIPTION 


nlOCS16/ ISA - Active low output asserted in 16 bit mode when 
nlOlS16 AEN is low and A4-A15 decode to the LAN91C96 
address programmed into the high byte of the Base 
Address Register. 
PCMCIA - Active low output asserted whenever the 
LAN91C96 is in 16 bit mode, CORO bit is high and 
nREG is low. 
nlORD/ i ISA, PCMCIA - Input. Active low read strobe used to 
xDS access the LAN91C96 IO space. 


68000 — Data strobe input. UDS, LDS, or DS can be 
tied to this pin. 
nlOWR/ i ISA, PCMCIA - Input. Active low write strobe used to 
R/nwW access the LAN91C96 IO space. 


the chip. 
nMEMR/ i ISA - Active low signal used by the host processor to 
nOE read from the external ROM. 


PCMCIA - Output Enable input used to read from the 
COR, CSR and attribute memory. 


Output. Connected to the DI input of the serial 
EEPROM. 


I with Input. Connected to the DO output of the serial 
pull-down | EEPROM. 


Kk 


Output. Serial EEPROM chip select. 


Input. External switches can be connected to these 
lines to select between predefined EEPROM 
configurations. The values of these pins are readable. 
Input. External switches can be connected to these 
lines to select between predefined EEPROM 
configurations. The values of these pins are readable. 

nTXLED/ INTERNAL ENDEC - Transmit LED output. 

nTXEN 


EXTERNAL ENDEC - Active low Transmit Enable 
output. 
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a eee DESCRIPTION 


nBSELED/ OD16 INTERNAL ENDEC - Board Select LED activated by 
RXD accesses to I/O space (nlIORD or nlIOWR active with 
AEN low and valid address decode for ISA, and with 
nREG low and CORO high for PCMCIA). The pulse is 
stretched beyond the access duration to make the 
LED visible. 
pullup 
nRXLED/ INTERNAL ENDEC - Receive LED output. 
RXCLK 
EXTERNAL ENDEC - Receive clock input. 
pullup 


iia 
he nLNKLED/ OD16 INTERNAL ENDEC - Link LED output. 
TXD 


O1 62 EXTERNAL ENDEC - Transmit Data output. 


ENEEP Input. This active high input enables the EEPROM to 
be read or written by the LAN91C96. Internally pulled 
up. Must be connected to ground if no serial 


EEPROM is used. 


nEN16 Input. When low the LAN91C96 is configured for 16 
bit bus operation. If left open the LAN91C96 works in 
8 bit bus mode. 16 bit configuration can also be 
programmed via serial EEPROM or software 


initialization of the CONFIGURATION REGISTER. 


XTAL1 An external parallel resonance 20MHz crystal should 
be connected across these pins. If an external clock 
source is used, it should be connected to this pin 


(XTAL1) and XTAL2 should be left open. 
An external parallel resonance 20MHz crystal should 
be connected across these pins. If an external clock 
source is used, it should be connected to XTAL1 and 
this pin (XTAL2) should be left open. 

RECP/ Diff. Input | AUI receive differential inputs. 

RECN “* 

TXP/nCOLL Diff. INTERNAL ENDEC - (nXENDEC pin open). In this 

TXN/nCRS Output mode TXP and TXN are the AUI transmit differential 
outputs. They must be externally pulled up using 150 
ohm resistors. 
EXTERNAL ENDEC - (nXENDEC pin tied low). In this 
mode the pins are inputs used for collision and carrier 
sense functions. 
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| PINNO. 
TQFP TY 
81 83 COLP : 
80 82 COLN 
85 87 TPERXP Diff. 10BASE-T receive differential inputs. 
84 86 TPERXN Input 
75 77 TPETXP Diff. INTERNAL ENDEC - 10BASE-T transmit differential 
73 75 TPETXN Output outputs. 
72 74 TPETXDP Diff. 10BASE-T delayed transmit differential outputs. Used 
74 76 TPETXDN Output in combination with TPETXP and TPETXN to 
generate the 10BASE-T transmit pre-distortion. 


PWRDWN/ i INTERNAL ENDEC - Powerdown input. It keeps the 
TXCLK LAN91C96 in powerdown mode when high (open). 
Must be low for normal operation. 
EXTERNAL ENDEC - Transmit clock input from 
external ENDEC. 
88 


RBIAS Analog A 22kohm 1% resistor should be connected between 
Input this pin and analog ground. 


92 nXENDEC | with When tied low the LAN91C96 is configured for 
Pee | pullup EXTERNAL ENDEC. When tied high or left open the 
a LAN91C96 will use its internal encoder/decoder. 
11,19, 13,21,40 | VDD +5V power supply pins or 3.3V power supply pins 
48,59, ,50, (Revisions E and later) 
98,38 61,100 


71,79, 7. AVDD +5V analog power supply pins or 3.3V power supply 
89 pins (Revisions E and later) 


Analog ground pins. 
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BUFFER SYMBOLS 


04 Output buffer with 2mA source and 4mA sink at 5V. 
Output buffer with 1mA source and 2mA sink at 3.3V 
1/04 Output buffer with 2mA source and 4mA sink at 5V. 
Output buffer with 1mA source and 2mA sink at 3.3V. 
0162 Output buffer with 2mA source and 16mA sink at 5V. 
Output buffer with 1mA source and 8mMA sink at 3.3V. 
024 Output buffer with 12mA source and 24mA sink at 5V. 
Output buffer with 6MA source and 12mA sink at 3.3V. 
OD16 Open drain buffer with 16mA sink at 5V. 
Open drain buffer with 8MA sink at 3.3V. 
OD24 Open drain buffer with 24mA sink at 5V. 
Open drain buffer with 12mA sink at 3.3V. 
1/024 _ Bi-directional buffer with 12mA source and 24mA sink at 5V. 
Bi-directional buffer with 6mMA source and 16MA sink at 3.3V. 
| Input buffer with TTL levels. 
IS Input buffer with Schmitt Trigger Hysteresis. 
Iclk Clock input buffer. 
Signal is 5.0V input tolerant when V.o=3.3V. For Revision E and 
later 


DC levels and conditions defined in the DC Electrical Characteristics section. 
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FIGURE 3 - LAN91C96 INTERNAL BLOCK DIAGRAM 
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FUNCTIONAL DESCRIPTION 


Except for the bus interface, the functional 
behavior of the LAN91C96_ after _ initial 
configuration is identical for ISA and PCMCIA 
modes. 


The LAN91C96 includes an arbitrated shared 
memory of 6144 bytes. Any portion of this 
memory can be used for receive or transmit 
packets. 


The MMU unit allocates RAM memory to be used 
for transmit and receive packets, using 256 byte 
pages. 


The arbitration is transparent to the CPU in every 
sense. There is no speed penalty for ISA type of 
machines due to arbitration. There are no 
restrictions on what locations can be accessed at 
any time. RAM accesses as well as MMU 
requests are arbitrated. 


The RAM is accessed by mapping it into I/O 
space for sequential access. Except for the RAM 
accesses and the MMU _ request/release 
commands, I/O accesses are not arbitrated. 


The I/O space is 16 bits wide. Provisions for 8 bit 
systems are handled by the bus interface. 


In the system memory space, up to 64 kbytes are 
decoded by the LAN91C96 as expansion ROM. 
The ROM expansion area is 8 bits wide. 


Device configuration is done using a serial 
EEPROM, with support for modifications to the 
EEPROM at installation time. A Flash ROM is 
supported for PCMCIA attribute memory. 


The CSMA/CD core implements the 802.3 MAC 
layer protocol. It has two independent interfaces, 
the data path and the control path. 
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Both interfaces are 16 bits wide. The control path 
provides a set of registers used to configure and 
control the block. These registers are accessible 
by the CPU through the LAN91C96 I/O space. 
The data path is of sequential access nature and 
typically works in one direction at any given time. 
An internal DMA type of interface connects the 
data path to the device RAM through the arbiter 
and MMU. 

is not 


The CSMA/CD data path interface 


accessible to the host CPU. 


The internal DMA interface can arbitrate for RAM 
access and request memory from the MMU when 
necessary. 


An encoder/decoder block interfaces the 
CSMA/CD block on the serial side. The encoder 
will do the Manchester encoding of the transmit 
data at 10 Mb/s, while the decoder will recover the 
receive clock, and decode received data. 


Carrier and Collision detection signals are also 
handled by this block and relayed to the 
CSMA/CD block. 


The encoder/decoder block can interface the 
network through the AUI interface pairs, or it can 
be programmed to use the internal 10BASE-T 
transceiver and connect to a twisted pair network. 


The twisted pair interface takes care of the 
medium dependent signaling for 10BASE-T type 
of networks. It is responsible for line interface 
(with external pulse transformers and_ pre- 
distortion resistors), collision detection as well as 
the link integrity test function. 


The LAN91C96 provides a 16-bit data path into 
RAM. The RAM is private and can only be 
accessed by the system via the arbiter. RAM 
memory is managed by the MMU. Byte and word 
accesses to the RAM are supported. 


If the system to SRAM bandwidth is insufficient 
the LAN91C96 will automatically use its 
IOCHRDY line for flow control. However, for ISA 
buses, IOCHRDY will never be negated. 


The LAN91C96 consists of an integrated Ethernet 
controller mapped entirely in I/O space. In 
addition, PCMCIA attribute memory space is 
decoded to interface an external CIS ROM, with 
configuration registers as per PCMCIA 3.X 
extensions (except COR) implemented on-chip in 
attribute space above the ROM decode area. The 
PCMCIA Configuration Registers are accessible 
in /O space and also to allow non-PCMCIA dual 
function designs. 


The Ethernet controller function includes a built-in 
6kbyte RAM for packet storage. This RAM buffer 
is accessed by the CPU through sequential 
access regions of 256 bytes each. The RAM 
access is internally arbitrated by the LAN91C96, 
and dynamically allocated between transmit and 
receive packets. Each packet may consist of one 
or more 256 byte page. The Ethernet controller 
functionality is identical to the LAN91C94 and 
LAN91C95 except where indicated otherwise. 


The LAN91C96 Memory Management Unit 
parameters are: 


RAM size 6kbytes 


Max. number of pages | 24 


Max. number of 24 (FIFOs have 24 


packets entries of 5 bits) 
Max. pages per packet | 6 
Page Size 256 bytes 
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BUFFER MEMORY 


The logical addresses for RAM access are divided 
into TX area and RX area. 


The TX area is seen by the CPU as a window 
through which packets can be loaded into 
memory before queuing them in the TX FIFO of 
packets. The TX area can also be used to 
examine the transmit completion status after 
packet transmission. 


The RX area is associated to the output of the RX 
FIFO of packets, and is used to access receive 
packet data and status information. 


The logical address is specified by loading the 
address pointer register. The pointer can 
automatically increment on accesses. 


All accesses to the RAM are done via I/O space. 


A bit in the address pointer also specifies if the 
address refers to the TX or RX area. 


In the TX area, the host CPU has access to the 
next transmit packet being prepared for 
transmission. In the RX area, it has access to the 
first receive packet not processed by the CPU yet. 


The FIFO of packets, existing beneath the TX and 
RX areas, is managed by the MMU. The MMU 
dynamically allocates and releases memory to be 
used by the transmit and receive functions. 
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TABLE 1 - 
LAN91C96 ADDRESS SPACE 


SIGNALS 
USED PCMCIA| 68000 | ON-CHIP DEPTH WIDTH 


PCMCIA nOE, nWE N Y N N Up to 32k 8 bits on 

Attribute (external locations, only even 

Memory ROM) even bytes are addresses 
usable 


PCMCIA nOE, nWE N Y N Y 64 locations, only 8 bits 
Configuration even bytes are 
Registers usable 
Ethernet I/O nlORD/ Y Y Y Y 16 locations 8 or 16 
space (1) nlOWR bits 
(68K: xDS, (68K: 16 bits 
R/nW) only) 


(1) This space also allows access to the PCMCIA Configuration Register through Bank 4. 


TABLE 2 - 
BUS TRANSACTIONS IN ISA MODE 
8 BIT MODE Even byte 
((NEN16=1) 
(16BIT=0)) 


a 
16 BIT MODE Even byte sais — byte 
otherwise 

PoE lt Evenbyte 


SS Se ee ee | Odd byte 
a a a ee Invalid cycle 
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TABLE 3 — 
BUS TRANSACTIONS IN PCMCIA MODE 


Ao | nei | cee | | OT 


ee tl 

8 BIT MODE Even a 
((lIOis8=1) + 

(nEN16=1). 

(16BIT=0)) 


+--+ + + Odd byte 


eis id ba el ell sila 
otherwise 


NO CYCLE 
TABLE 4 - 
Seema TRANSACTIONS IN 68000 a pe 

8 BIT —— ae eS ACCESS 

16 BIT MODE Even byte Odd byte 

A0=0).(nSBHE=0 
16BIT: CONFIGURATION REGISTER bit 7 
IOis8: CSR register bit 5 
nEN16: pin nEN16 


8 Bit mode: ((IOis8 = 1) + (nMIS16 = 1) 
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INTERRUPT STRUCTURE 


The Ethernet interrupt is conceptually equivalent interrupt structure is similar for ISA and PCMCIA 
to the LAN91C94 interrupt line, it is the or function modes with the following exceptions: 

of all enabled interrupts within the Ethernet core. 

The enabling, reporting, and clearing of these A. PCMCIA uses a single interrupt pin (nIREQ) 
sources is controlled by the ECOR register. The while ISA can use any of four INTRO-3 pins. 


TABLE 5 - INTERRUPT MERGING 
| FUNCTION, =| PCMCIAMODE | CISAMODE 
Interrupt Output nIREQ when function is Ready. 
Acts as ready line at power up. l.e. 
remains low until the chip 


(therefore, card) is Ready 


OR function of all interrupt bits specified in the Interrupt Status Register 
ANDed with their respective Enable bits 

| Ethernet InterruptEnable | CC—C—“‘;CSCCCCNotAppplicable in ISAmode__ 

Intr bit in ECSR 


RESET LOGIC 
The pins and bits involved in the different reset SRESET - Soft Reset bit in ECOR, or the 
mechanisms are: SRESET bit 
RESET - Input Pin SOFT RST - EPH Soft Reset bit in RCR 


SAMPLES ISA TRIGGERS 
VS. PCMCIA EEPROM 
RESETS THE FOLLOWING FUNCTIONS MODE READ 


RESET pin All internal logic 


ECOR Register | The Ethernet controller function and No Yes 
SRESET bit Ethernet PCMCIA Configuration Registers 

except for the bit itself. Setting this bit also 

lowers the nlREQ/READY line. When 

cleared, the nIREQ/READY line is raised. 


SOFT RST The Ethernet controller itself except for the 
IA, CONF and BASE registers. It does not 
reset any PCMCIA Configuration Register. 
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POWER DOWN LOGIC STATES 


Tables 6A, 6B, 7A, and 7B describe the power down states of the LAN91C96. The pins and bits involved 
in power down are: 

1. PWRDWN/TXCLK - Input pin valid when XENDEC is not zero (0). 

2. Pwrdwn bits in ECSR 

3. Enable Function bit in ECOR 

4. PWRDN - Legacy power down bit in Control Register. 


LAN91C96 Power Down States 


TABLE 6A - ISA MODE DEFINED STATES (REFER TO TABLE 6B FOR NEXT STATES TO WAKE- 


CTR 
WAKEUP_EN DOES NOT POWER 
POWERS DOWN DOWN 


UP EVENTS) 
CURRENT STATE 


Everything. Asserts the ee cal 
modem power down pin 
(nPWDN) also 
Po Ethernet Tx, Rx, Link _| 
[Ethernet Tx, Rx,Link [| 
Pot Ethernet Tx, Rx,Link TO 
Note 1: The chart assumes that ECOR Function Enable bit is meaningless in ISA mode. 
Note 2: ECSR Power Down bit must not be set to one(1) in ISA mode. 


TABLE 6B - ISA MODE 
NEXT STATE Po 


Po NEXTSTATE 
PWR DWN ECOR ECSR CTR 
PIN FUCNTION POWER WAKEUP_EN 
WAKES UP BY (A=Assrtd) ENABLE DOWN DWN BIT BIT COMMENTS 
wll PWRDWN Pin nA No change No change No change No change ECOR Function Enable 
deassertion [nace akekamic (eae Bit value is meaningless in 
I ay SE ae eS Cea eT cea eT 


[0 _—‘|FullyAwake i 
3 By writing a 0 to 
CTR 
WAKEUP_EN bit 
4 


By writing a 0 to The CTR PWRDWN bit 
CTR has precedence unlike the 
WAKEUP_EN bit LAN91C95 
AND CTR 
PWRDWN bit = 
0 


“a By writing 0 to 
CTR PWRDWN 
bit 


Note 1: The chart assumes that ECOR Function Enable bit is meaningless in ISA mode. 
Note 2: ECSR Power Down bit must not be set to one (1) in ISA mode. 
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TABLE 7A - PCMCIA MODE (REFER TO TABLE 7B FOR NEXT STATES TO WAKE-UP EVENTS) 
CURRENT STATE 


CTR 
ECOR | ECSR PWR 
PWRDWN FUNC PWR DWN |WAKEUP DOES NOT POWER 
PIN ENABL | DOWN BIT a POWERS DOWN DOWN 
(A= Assrte) 


Everything. Asserts the modem power 
down pin (nNPWDN) also 
Ethernet Tx, Rx, Link; 
PCMCIA puiGoniig Mem 


Ec eb 
Att/Config Mem 
ee eee 


Ethernet Tx, Rx, Link PCMCIA Att/Config Mem 

Ethernet Tx, Rx, Link PCMCIA Att/Config Mem 

+} 3 Ethernet Tx, Rx’, Link PCMCIA Att/Config Mem 
1 - : 


Note: The LAN91C96 Taplementation is different from the LAN91C95; the LAN91C96 powers down 
the Ethernet Rx and Link logic also, whereas, the LAN91C95 does not. 
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TABLE 7B - PCMCIA MODE 
NEXT STATE 


PWR DWN ECOR ECSR CTR CTR 
WAKES UP BY a Assia} ENABLE | DOWN baad ara BIT COMMENTS 
= Nees ee accessible entirely 
i 
By writing a 0 to CTR 
ee 
Es By writing a0 to CTR 


PWRDWN and 0 to 
WAKEUP _EN bits 


..5 |By writing 1 to ECOR 
Func Enable, 0 to ECSR 
Power Down, 0 to CTR 


By writing 1 to ECOR 
Func Enable, 0 to ECSR 


By writing 10 to ECSR 
Power Down bit* 

S | By writing 0 to ECSR 
Power Down and a 0 to 
CTR PWRDWN bit 

By writing 0 to ECSR 
Power Down and writing 
CTR PWRDWN bit = 0 
& WAKEUP_EN = 0, if 


> 


NOTE: Both Power down bits need to be 
written as 0 only if both were set to 1 


=] 


=] 
> 


NOTE: Both Power down bits need to be 
written as 0 only if both were set to 1 


=j 
> 


..8S | By writing 0 to ECSR 
Power Down and writing 
CTR PWRDWN bit = 0 
& WAKEUP_EN = 0, if 
needed 


=] 
> 


+ 
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PCMCIA Attribute Memory 
Address 0- 7FFEh 


The Attribute Memory is implemented using an 
external parallel EEPROM, ROM or Flash ROM. A 
parallel EEPROM (or equivalent external device) 
must be used for CIS. 


In ISA mode, serial EEPROM is used for 
configuration and IEEE Node address making it 
software compatible to the LAN9xxx family of 
Ethernet LAN Controllers. The EEPROM is 
optional for both ISA and PCMCIA requiring a 
Minimum size of 64 X 16 bit word addresses. 


The LAN91C96 generates the appropriate control 
lines (nFCS and nFWE) to read and write the 
Attribute memory, and it tri-states the data bus 
during external Attribute Memory accesses. Only 
even locations are used. 
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PCMCIA Configuration Registers 
Address 8000-8003h 


The PCMCIA Configuration Registers are stored 
inside the LAN91C96 above the external Attribute 
Memory address space. These registers are used 
to configure and control the PCMCIA related 
functionality of the Ethernet. These registers are 
eight bit wide and reside on even locations. The 
LAN91C96 will ignore odd access to this area and 
ignore writes. The device will read zero’s on odd 
access. This address offset has changed from 
prior LAN9XXX PCMCIA Family designs to allow 
a larger address range for other attribute memory 
data. This data could be a larger card information 
structure or a XIP data image. 


Attribute Memory map 


The EPROM attribute memory decodes are 
shown below. Internal to the LAN91C96, the 
memory addressing logic will allow byte or word 
access on even byte boundaries. LAN91C96 uses 
address A0-9, A15, along with nREG, 


With or Without 64x16 bit Serial EEPROM: 


ATTRIBUTE MEMORY EXTERNAL EPROM | CONFIGURATION 
ADDRESS STORE REGISTERS 


nCE1, nWE and nOE. An on odd byte address 
access (A0=1), the LAN91C96 will generate a 
arbitrary value of Zero (0) since the PCMCIA 
specification states that the high byte of a word 
access in attribute memory is a don't care. This 
allows backward compatibility to 8 bit hosts. 


0 - 7FFEh = OZ 


| 8000h-8003h_— | KT 
PCMCIA CONFIGURATION REGISTERS DESCRIPTION 


Ethernet Function (Base Address 8000h) 


8000h - Ethernet Configuration Option Register (ECOR) 


(ee es mee re a Pe es ee ed ee ee ee eee 
SRESET LevIREQ WR Enable 
(Read only) ATTRIB Function 
0 1 0 0 0 0 0 0 


BIT 7 - SRESET: This bit when set will clear all 
internal registers associated with the Ethernet 
function except itself and it will also lower the 
nIREQ/READY pin. When this bit is cleared, 
nIREQ/READY pin will be raised. 


BIT 6 - LevIREQ: This bit is read only and reads 
as a one to indicate level mode interrupts are 
used. Pulse mode interrupts are not supported. 
BIT 5, 4, 3 - Not defined 


BIT 2 - WRATTRIB: This bit when set (1) allows 
writing into the external attribute memory space. 


BIT 1 - Not Defined 


34 


BIT 0 - Enable Function: This bit enables (1) or 
disables (0) the Ethernet function. While the 
Ethernet function is disabled it remains in power 
down mode, no access to the Ethernet I/O space 
(i.e. The bank register are not accessible) is 
allowed. IREQ is not generated for this function 
and INPACK* is not returned for accesses to the 
Ethernet registers. 


NOTE: Magic packet bit setting is ignored if the 
function is disabled. 


8002h - Ethernet Configuration and Status Register (ECSR) 


ae ee iss er 


BIT 7 - Not defined 
BIT 6 - Not defined 


BIT 5 - IOls8: This bit when set, indicates that 
the Host can only do 8 bit cycles (on D7-0). The 
Ethernet function is forced in this case to eight 
bit mode regardless of the EN16* pin and 16BIT 
value. This bit also disables (floats) the lOls16 
signal. 


BIT 4 - Not defined 


BIT 3 - Not defined 
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BIT 2 - PwrDwn: When set (1), this bit puts the 
LAN91C96 Ethernet function into power down 
mode. The Ethernet function is also put into 
power down mode when the Enable Function bit 
(ECOR bit 0 in PCMCIA only) is cleared. Refer to 
the Power Down Logic section for additional 
information. 


BIT 1 - Intr: This bit is read/set to a one when 
this function is requesting interrupt service. 
When this bit is set, IREQOut is asserted. 


BIT 0 - Not Defined 


PACKET FORMAT IN BUFFER MEMORY FOR ETHERNET 


The packet format in memory is similar to that in bytes, and that in turn is followed by the data area. 
the TRANSMIT and RECEIVE areas. The first The data area holds the packet itself, and its 
word is reserved for the status word, the next length is determined by the byte count. The 
word is used to specify the total number of packet memory format is word oriented. 


RAM 
OFFSET 


(DECIMAL) 
0 


1536 Max 
(6 x 256) 


STATUS WORD 


RESERVED BYTE COUNT (always even) 


DATA AREA 


CONTROL BYTE | LAST DATA BYTE (if odd) 


TRANSMIT PACKET RECEIVE PACKET 


Written by CSMA upon transmit | Written by CSMA upon receive 
STATUS WORD completion (see Status Register) | completion (see RX Frame 
Status Word) 


BYTE COUNT Written by CPU Written by CSMA 
DATA AREA Written/modified by CPU Written by CSMA 


CONTROL BYTE Written by CPU to control] Written by CSMA. Also has 
ODD/EVEN data bytes ODD/EVEN bit 
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BYTE COUNT - Divided by two, it defines the total 
number of words, including the STATUS WORD, 
the BYTE COUNT WORD, the DATA AREA and 
the CONTROL BYTE. The receive byte count 
always appears as even, the ODDFRM bit of the 
receive status word indicates if the low byte of the 
last word is relevant. The transmit byte count 
least significant bit will be assumed 0 by the 
controller regardless of the value written in 
memory. 


DATA AREA (in RAM) 


The data area starts at offset 4 of the packet 
structure, and it can extend for up to 2043 bytes. 
The data area contains six bytes of 
DESTINATION ADDRESS followed by six bytes of 
SOURCE ADDRESS, followed by a variable 
length number of bytes. 


On transmit, all bytes are provided by the CPU, 
including the source address. The LAN91C96 
does not insert its own source address. On 
receive, all bytes are provided by the CSMA side. 


The 802.3 Frame Length word (Frame Type in 
Ethernet) is not interpreted by the LAN91C96. It is 
treated transparently as data for both transmit and 
receive operations. 
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CONTROL BYTE (in RAM) 


The CONTROL BYTE always resides on the high 
byte of the last word. For transmit packets the 
CONTROL BYTE is written by the CPU as: 


|x | x | opD | cRC | o]/0]0]0 | 


ODD - If set, indicates an odd number of bytes, 
with the last byte being right before the CONTROL 
BYTE. If clear, the number of data bytes is even 
and the byte before the CONTROL BYTE is not 
transmitted. 


CRC - When set, CRC will be appended to the 
frame. This bit has only meaning if the NOCRC 
bit in the TCR is set. 


For receive packets the CONTROL BYTE is 
written by the controller as: 


}oO} 1] opp [o[o]}o]o}o| 


ODD - If set, indicates an odd number of bytes, 
with the last byte being right before the CONTROL 
BYTE. If clear, the number of data bytes is even 
and the byte before the CONTROL BYTE should 
be ignored. 


RECEIVE FRAME STATUS WORD (in RAM) 


This word is written at the beginning of each 


HASH VALUE 


ALGNERR - Frame had alignment error. 
BRODCAST - Receive frame was broadcast. 
BADCRC - Frame had CRC error. 


ODDFRM - This bit when set indicates that the 
received frame had an odd number of bytes. 


TOOLNG - The received frame is longer than the 
802.3 maximum size (1518 bytes on the cable). 


TOOSHORT - The received frame is shorter than 
the 802.3 minimum size (64 bytes on the cable). 


receive frame in memory. 


It is not available as a 


register. 


ALGN BROD BADCRC | ODDFRM | TOOLNG TOO 
ERR CAST SHORT 


HASH VALUE - Provides the hash value used to 
index the Multicast Registers. Can be used by 
receive routines to speed up the group address 
search. The hash value consists of the six most 
significant bits of the CRC calculated on the 
Destination Address, and maps into the 64 bit 
multicast table. Bits 5,4,3 of the hash value select 
a byte of the multicast table, while bits 2,1,0 
determine the bit within the byte selected. 


Examples of the address mapping are shown in 
the table below: 


ADDRESS HASH VALUE 5-0 MULTICAST TABLE BIT 


ED 00 00 00 00 00 


OD 00 00 00 00 00 
01 00 00 00 00 00 


MT-O bit 0 
MT-2 bit 0 
MT-4 bit 7 
MT-7 bit 7 


2F 00 00 00 00 00 


MULTCAST - Receive frame was multicast. If 
hash value corresponds to a multicast table bit 
that is set, and the address was a multicast, 
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the packet will pass address filtering regardless of 
other filtering criteria. 


REGISTERS MAP IN I/O SPACE 


16 Bit Registers 16 Bit Registers 16 Bit Registers 16 Bit Registers 16 Bit Registers 
a 7 SAYRE 7 Ke a SNe alia SE po NY / Meo ~ Was Nuc nee yo TN /\ yr 
BANKO BANK1 BANK2 BANK3 BANK4 

Y 


a ECOR (LOW BYTE) 
ECSR (HIGH BYTE) 


EPH STATUS MULTICAST 


FIFO PORTS TABLE 


Y AI yz e 
POINTER 
a 


MGMT 


GENERAL 


MCR PURPOSE DATA REVISION 


RESERVED CONTROL INTERRUPT ERCV 


BN 
BANK SELECT REGISTER =. BANK SELECT 


NS 
BANK2 Register 
used during 
___Non volatile, run time. 
stored in EEPROM. 


FIGURE 10 - LAN91C96 REGISTERS 
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(0 SPACE ACCESS 


The address is determined by the Ethernet I/O Split into 4 banks in ISA mode and 5 banks in 

Base Registers. The Ethernet I/O space can be PCMCIA mode. The last word of the I/O area is 

configured as an 8 or 16 bit I/O space, and is shared by all banks and can be used to change 

similar to the LAN91C94, LAN91C92, etc. I/O the bank in use. Banks 0 through 3 functionally 

space mapping. To limit the I/O space correspond to the LAN91C94 banks, while Bank 4 

requirements to 16 locations, the registers are allows access to the PCMCIA registers in ISA 
mode. 


Registers are described using the following 
convention: 


OFFSET | NAME — | TYPE SYMBOL 


BANK SELECT 
REGISTER READ/WRITE 


RST RST RST RST RST RST RST RST 
Val Val Val Val Val Val Val Val 


RST RST RST RST RST RST RST RST 


Val Val Val Val Val Val Val Val 
OFFSET - Defines the address offset within the two eight bit registers. In such case, the offset of 
IOBASE where the register can be accessed at, each one is independently specified. 
provided the bank select has the appropriate 
value. The offset specifies the address of the even Regardless of the functional description, when the 
byte (bits 0-7) or the address of the complete LAN91C96 is in 16 bit mode, all registers can be 
word. The odd byte can be accessed using accessed as words or bytes. 


address (offset + 1). 

RST Val - The default bit values upon hard reset 
Some registers (e.g. the Interrupt Ack. or the are highlighted below each register. 
Interrupt Mask) are functionally described as 


40 


l/(O SPACE REGISTERS DESCRIPTION 


(Bank 4 Registers are described under PCMCIA Configuration Registers and will not be described again). 


BANK SELECT REGISTER 


OFFSET | NAME | TYPE SYMBOL 


BANK SELECT 


0 0 1 1 0 0 1 1 


X X X Xx X 0 0 0 


The BANK SELECT REGISTER 
accessible regardless of the value of BSO-2. 


REGISTER 


BS2, BS1, BSO - Determine the bank presently in 
use. 


This register is always accessible except in power 
down mode and is used to select the register bank 
in use. 


The upper byte always reads as 33h and can be 
used to help determine the I/O location of the 
LAN91C96. 


0 0 
0 1 
0 1 
1 0 
1 0 
1 1 
1 1 


is always 


The LAN91C96 implements only 5 banks in both 
PCMCIA and ISA mode, therefore accesses to 
non-existing banks will ignore writes and reads will 
return 0x33 on byte reads. All 5 banks are 
accessible in both ISA and PCMCIA mode. 


secon 
w 
> 
=z 
A 
+ 


At 
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OFFSET NAME TYPE SYMBOL 
0 TRANSMIT CONTROL REGISTER READ/WRITE TCR 


This register holds bits programmed by the CPU to control some of the protocol transmit options. 
FDSE ETEN-TYPE EPH STP FDUPLX MON_ NOCRC 
LOOP | SQET CSN 
0 0 0 0 0 0 X 0 


PADEN[ —=[ | ~~ | TXP_EN | FORCOL [ LOOP | TXENA 
0 x x x 0 0 0 0 


NOCRC_ - Does not append CRC to transmitted 
frames when set, allows software to insert the 
desired CRC. Defaults to zero, namely CRC 
inserted. 


FDSE - Full Duplex Switched Ethernet. When set, 
the LAN91C96 is configured for Full Duplex 
Switched Ethernet, it defaults clear to normal 
CSMA/CD protocol. In FDSE mode the 
LAN91C96 transmit and receive processes are 
fully independent, namely no deferral and no 
collision detection are implemented. When FDSE 
is set, FDUPLX is internally assumed high and 
MON_CSN is assumed low regardless of their 
actual values. 


ETEN-TYPE - Early transmit underrun function 
type. When low, ETEN bit in the PTR register will 
enable the Early transmit underrun function as it 
was implemented in the LAN91C94. le. “The 
Early Transmit function allows the CPU to 
enqueue the first transmit packet before it is fully 
loaded in packet memory. The loading 
Operation proceeds in parallel with the 
transmission, and in the case that the transmitter 
gets ahead of the CPU, the LAN91C96 will 
prevent the transmission of erroneous data by 
forcing an Underrun condition. Underruns will 
be triggered by starving the transmit DMA if the 
LAN91C96 detects that the DMA TX address 
exceeds the pointer address.” 


With ETEN-TYPE set to one (1), ETEN bit set to 
one(1) in the pointer register will mean the 
following: 


“For underrun detection purposes the RAM 
logical address and packet numbers of the 
packet being loaded are compared against the 
logical address and packet numbers of the 
packet being transmitted. If the packet numbers 
match and the logical address of the packet 
being transmitted exceeds the address being 
loaded, the LAN91C96 will prevent the 
transmission of erroneous data by forcing an 
Underrun condition. Underruns will be triggered 
by starving the transmit DMA if the LAN91C96 
detects that the DMA TX address exceeds the 
pointer address.” 


NOTE: The bit may be available for chips with 
Rev. ID 6 only and may be assigned to a different 
function in the future. 


EPH_LOOP - Internal loopback at the EPH block. 
Does not exercise the encoder decoder. Serial 
data is looped back when set. Defaults low. Note: 
After exiting the loopback test, an SRESET in the 
ECOR or the SOFT_RST in the RCR must be set 
before returning to normal operation. 


STP_SQET - Stop transmission on SQET error. If 
set, stops and disables transmitter on SQE test 
error. Does not stop on SQET error and transmits 
next frame if clear. Defaults low. 

FDUPLX - When set it enables full duplex 
operation. This will cause frames to be received if 
they pass the address filter regardless of the 
source for the frame. When clear the node will not 
receive a frame sourced by itself. Clearing this bit 


(Normal Operation), allows in promiscuous mode, 
not to receive it’s own packet. 


TXP_EN - This bit is reserved and should always 
be set to 0 on the LAN91C96. 


MON_CSN_ - When set the LAN91C96 monitors 
carrier while transmitting. It must see its own 
carrier by the end of the preamble. If it is not seen, 
or if carrier is lost during transmission, the 
transmitter aborts the frame without CRC and 
turns itself off. 


When this bit is clear the transmitter ignores its 
own carrier. Defaults low. 


PAD_EN~ - When set, the LAN91C96 will pad 
transmit frames shorter than 64 bytes with 00. 
Does not pad frames when reset. 


FORCOL - When set the transmitter will force a 
collision by not deferring deliberately. After the 
collision this bit is reset automatically. This bit 
defaults low to normal operation. 


LOOP - Local Loopback. When set, transmit 
frames are internally looped to the receiver after 
the encoder/decoder. Collision and Carrier Sense 
are ignored. No data is sent out. Defaults low to 
normal mode. 


TXENA _ - Transmit enabled when set. Transmit 
is disabled if clear. When the bit is cleared the 
LAN91C96 will complete the current transmission 
before stopping. When stopping due to an error, 
this bit is automatically cleared. 


TABLE 8 - TRANSMIT LOOP 


|X | 


es ee) aes el 
= eS ee ee ee ee ee 
| o | + fo =f 90 | 
a a a ee 

X NORMAL CSMAICD - No 
ia Ll i Ee 
fp 


TRANSMITS 


FDSE | FDUPLX | EPH_LOOP | LOOP LOOPS AT TO _ 


FULL DUPLEX 
SWITCHED ETHERNET 
- No loopback and No 
SQET 
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OFFSET 


This register stores the status of the last 
transmitted frame. This register value, upon 
individual transmit packet completion, is stored as 
the first word in the memory area allocated to the 
packet. Packet interrupt processing should use 


Po NAME CTYPE 
EPH STATUS REGISTER READ ONLY 


SYMBOL 


the copy in memory as the register itself will be 
updated by subsequent packet transmissions. 
The register can be used for real time values (like 
TXENA and LINK Ok). If TXENA is cleared the 
register holds the last packet completion status. 


TX LINK_ CTR EXC LOST LATCOL | WAKEUP 
eS =f Let aria a 

o oe Soe 1 500E me "EE SNGL TX mre 
vee a nt co cot 


TXUNRN - Transmit Under run. Set if Under run 
occurs, it also clears TXENA bit in TCR. Cleared 
by setting TXENA high. This bit should never be 
set under normal operation. 


LINK_OK - State of the 10BASE-T Link Integrity 
Test. A transition on the value of this bit generates 
an interrupt when the LE ENABLE bit in the 
Control Register is set. 


RES -— This bit is reserved and will always return a 
zero(0). 


CTR_ROL - Counter Roll over. When set one or 
more 4 bit counters have reached maximum count 
(15). Cleared by reading the ECR register. 


EXC_DEF - Excessive deferral. When set 
last/current transmit was deferred for more than 
1518 * 2 byte times. Cleared at the end of every 
packet sent. 


LOST_CARR - Lost carrier sense. When set 
indicates that Carrier Sense was not present at 
end of preamble. Valid only if MON_CSN is 
enabled. This condition causes TXENA bit in TCR 
to be reset. Cleared by setting TXENA bit in TCR. 


LATCOL - Late collision detected on last transmit 
frame. If set a late collision was detected (later 
than 64 byte times into the frame). When detected 
the transmitter JAMs and turns itself off clearing 
the TXENA bit in TCR. Cleared by setting TXENA 
in TCR. 


WAKEUP - When this bit is set, it indicates that a 
receive packet was received that had the “Magic” 
packet (MP) signature of the node’s own 
Individual address repetitions in it. This bit 
indicates a valid detection for magic packet. 


TX_DEFR - Transmit Deferred. When set, carrier 
was detected during the first 6.4 uSec of the inter 
frame gap. Cleared at the end of every packet 
sent. 


LTX_BRD - Last transmit frame was a broadcast. 
Set if frame was broadcast. Cleared at the start of 
every transmit frame. 


SQET - Signal Quality Error Test. The transmitter 
opens a 1.6 us window 0.8 us after transmission 
is completed and the receiver returns inactive. 
During this window, the transmitter expects to see 
the SQET signal from the transceiver. The 
absence of this signal is a ‘Signal Quality Error’ 
and is reported in this status bit. Transmission 
stops and EPH INT is set if STP_SQET is in the 
TCR is also set when SQET is set. This bit is 
cleared by setting TXENA high. 
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16COL- 16 collisions reached. Set when 16 
collisions are detected for a transmit frame. 
TXENA bit in TCR is reset. Cleared when TXENA 
is set high. 


LTX_MULT - Last transmit frame was a multicast. 
Set if frame was a multicast. Cleared at the start 
of every transmit frame. 


MULCOL - Multiple collision detected for the last 
transmit frame. Set when more than one collision 
was experienced. Cleared when TX_SUC is high 
at the end of the packet being sent. 


SNGLCOL - Single collision detected for the last 
transmit frame. Set when a collision is detected. 
Cleared when TX_SUC is high at the end of the 
packet being sent. 


TX_SUC_ - Last transmit was successful. Set if 
transmit completes without a fatal error. This bit is 
cleared by the start of a new frame transmission 
or when TXENA is set high. 
Fatal errors are: 
16 collisions 
SQET fail and STP_SQET = 1 
FIFO Underrun 
Carrier lost and MON_CSN = 1 
Late collision 
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OFFSET | CNAME TYPE SYMBOL 
a se RECEIVE CONTROL REGISTER READ/WRITE 


ie tt ei) 
0 0 0 0 0 0 0 0 
ALMUL PRMS RX_ 
Sicleg teglafag ee! 
0 0 0 0 0 0 0 0 


SOFT_RST - Software activated Reset. Active 
high. Initiated by writing this bit high and 
terminated by writing the bit low. The LAN91C96 
configuration is not preserved, except for 
Configuration, Base, and IAO-5 Registers. The 
EEPROM in both ISA and PCMCIA mode is not 
reloaded after software reset. 


FILT_CAR - Filter Carrier. When set filters leading 
edge of carrier sense for 12 bit times. Otherwise 
recognizes a receive frame as soon as carrier 
sense is active. 


STRIP_CRC - When set it strips the CRC on 
received frames. When clear the CRC is stored in 
memory following the packet. Defaults low. 


RXEN - Enables the receiver when set. If cleared, 
completes receiving current frame and then goes 
idle. Defaults low on reset. 


ALMUL - When set accepts all multicast frames 
(frames in which the first bit of DA is '1'). When 
clear accepts only the multicast frames that match 
the multicast table setting. Defaults low. 


PRMS - Promiscuous mode. When set receives 
all frames. 

Change vs. LAN91C92: Does not receive its own 
transmission when not in full duplex(FDUPLX)!. 


RX_ABORT - This bit is set if a receive frame was 
aborted due to length longer than 1532 bytes. The 
frame will not be received. The bit is cleared by 
RESET or by the CPU writing it low. 
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OFFSET [| CNAME OC C*dL;SC§$_T'YPP; SYMBOL 


Counts four parameters for MAC statistics. When 
any counter reaches 15 an interrupt is issued. All 


COUNTER REGISTER READ ONLY 


counters are cleared when reading the register, 
and do not wrap around beyond 15. 


NUMBER OF EXC. DEFERRED TX NUMBER OF DEFERRED TX 
0 | 


ee ae ee ae ae 0 | 2 
MULTIPLE COLLISION COUNT SINGLE COLLISION COUNT 
a a a (ee (ee 


Each four bit counter is incremented every time 
the corresponding event, as defined in the EPH 
STATUS REGISTER bit description, occurs. Note 
that the counters can only increment once per 
enqueued transmit packet, never faster, limiting 
the rate of interrupts that can be generated by the 
counters. For example if a packet is successfully 
transmitted after one collision the SINGLE 
COLLISION COUNT field is incremented by one. 
If a packet experiences between 2 to 16 collisions, 
the MULTIPLE COLLISION COUNT field is 
incremented by one. 
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If a packet experiences deferral the NUMBER OF 
DEFERRED TX field is incremented by one, even 
if the packet experienced multiple deferrals during 
its collision retries. 


The COUNTER REGISTER facilitates maintaining 
statistics in the AUTO RELEASE mode where no 
transmit interrupts are generated on successful 
transmissions. 


Reading the register in the transmit service 
routine will be enough to maintain statistics. 
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OFFseT. | CNAME | CTYPE SYMBOL 
| 8 | MEMORY INFORMATION REGISTER READONLY | MR | 


For software compatibility with other LAN9000 multiplier M is determined by the MCR upper byte. 
parts all memory-related information — is M equals “1” for the LAN91C96. 
represented in 256 x M byte units, where the 


FREE MEMORY AVAILABLE (in BYTES* 256* M 


a a ee ee 


MEMORY SIZE (in BYTES* 256* M 


pe Os 0 at 


FREE MEMORY AVAILABLE - This register can MEMORY SIZE - This register can be read to 
be read at any time to determine the amount of determine the total memory size, and will always 
free memory. The register defaults to the read 18H (6144 bytes) for the LAN91C96. 
MEMORY SIZE upon reset or upon the RESET 

MMU command. 


| MEMORY SIZE REGISTER | M_ | ACTUAL MEMORY _| 
LAN91C94 


LAN91C96 6144 bytes 
LAN91C100 128 kbytes 
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TYPE 


| CNAME 
MEMORY CONFIGURATION 
REGISTER 


|) CTYPE 
lower byte READ/WRITE MCR 
upper byte READ ONLY 


ho Memory Size Multiplier “IM” eos oe 


0 


0 0 1 1 


Memory Reserved for Transmit (in BYTES * 256 * M) 


0 0 0 0 


MEMORY RESERVED FOR TRANSMIT - 
Programming this value allows the host CPU to 
reserve memory to be used later for transmit, 
limiting the amount of memory that receive 
packets can use up. When programmed for zero, 
the memory allocation between transmit and 
receive is completely dynamic. When 
programmed for a non-zero value, the allocation is 
dynamic if the free memory exceeds the 
programmed value, while receive allocation 
requests are denied if the free memory is less or 
equal to the programmed value. This register 
defaults to zero upon reset. It is not affected by 
the RESET MMU command. 


0 0 0 0 


The value written to the MCR is a reserved 
memory space IN ADDITION TO ANY MEMORY 
CURRENTLY IN USE. If the memory allocated for 
transmit plus the reserved space for transmit is 
required to be constant (rather than grow with 
transmit allocations) the CPU should update the 
value of this register after allocating or releasing 
memory. 


The contents of MIR as well as the low byte of 
MCR are specified in 256* M bytes. The multiplier 
M is determined by bits 11, 10 and 9 as follows: 


DEVICE BIT11 | BIT 10 BIT9 | M | MAX MEMORY SIZE 
FEAST [| oO | 64 | 2 | 256% 256" 2=128k 
LANS1C90 | OT Ott 256" 256" 1=64k 


PURO: I 200 — if ae Io] 256k 
FUTURE: Sst] 0S 0 =] 512k 


FUTURE: 2]. =D = 0s] 


Note”*: 
controllers of the LAN9000 family. 
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Bits 11, 10 and 9 are read only bits used by the software driver to transparently run on different 
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OFFSET [| CNAME | CTYPE SYMBOL 
a CONFIGURATION REGISTER READ/WRITE 


The Configuration Register holds bits that define 
the device configuration and are not expected to 
change during run-time. This register is part of the 
EEPROM saved setup in ISA mode only. In 


PCMCIA mode, this register is initialized to the 
state as defined below as if not EEPROM is 
present in ISA mode (ie. ENEEP Pin is a don’t 
care in PCMCIA mode) 


NO WAIT FULL SET AUI 
se Socr SELECT 


‘Sait 
function 0 1 1 0 0 0 x 
of EN16* 
pin 


NO WAIT - When set, does not request additional 
wait states. An exception to this are accesses to 
the Data Register if not ready for a transfer. When 
clear, negates IOCHRDY for two to three 20MHz 
clocks on any cycle to the LAN91C96. 


FULL STEP - This bit is used to select the 
signaling mode for the AUI port. When set the AUI 
port uses full step signaling. Defaults low to half 
step signaling. This bit is only meaningful when 
AUI SELECT is high. 


SET SQLCH - When set, the squelch level used 
for the 10BASE-T receive signal is 240mV. When 
clear the receive squelch level is 400mV. Defaults 
low. 


AUI SELECT - When set the AUI interface is 
used, when clear the 10BASE-T interface is used. 
Defaults low. 


16BIT - Used in conjunction with EN16* and IO is 
8 to define the width of the system bus. If the 
EN16* pin is low, this bit is forced high. Otherwise 
the bit defaults low and can be programmed by 
the host CPU. 


DIS LINK - This bit is used to disable the 1OBASE- 
T link test functions. When this bit is high the 


LAN91C96 disables link test functions by not 
generating nor monitoring the network for link 
pulses. In this mode the LAN91C96 will transmit 
packets regardless of the link test, the EPHSR 
LINK_OK bit will be set and the LINK LED will stay 
on. When low the link test functions are enabled. 
If the link status indicates FAIL, the EPHSR 
LINK_OK bit will be low, while transmit packets 
enqueued will be processed by the LAN91C96, 
transmit data will not be sent out to the cable. 


INT SEL1-0 - In ISA mode, used to select one out 
of four interrupt pins. The three unused interrupts 
are tristated. 


INTSEL1 INTSELO INTERRUPT PIN USED 


0 0 INTRO 
0 1 INTR1 
1 0 INTR2 
1 1 INTRS 
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OFFSET [| NAME CTYPE SYMBOL 
= Saaae BASE ADDRESS REGISTER READ/WRITE 


For ISA mode only, this register holds the I/O 
address decode option chosen for the I/O and 


ROM space. It is part of the EEPROM saved 
setup, and is not usually modified during run-time. 


0 


14 
0 0 1 1 0 0 0 


ROM SIZE | RAI | 


0 1 1 


A15 - A13 and AQ - A5 - These bits are compared 
in ISA mode against the I/O address on the bus to 
determine the IOBASE for LAN91C96 registers. 
The 64k I/O space is fully decoded by the 
LAN91C96 down to a 16 location space, therefore 
the unspecified address lines A4, A10, Ai1 and 
Ai2 must be all zeros. 


ROM SIZE - Determines the ROM decode area in 
ISA mode memory space as follows: 


00 = ROM disable 

01 = 16k: RA14-18 define ROM select. 
10 = 32k: RA15-18 define ROM select. 
11 = 64k: RA16-18 define ROM select. 


RA18-RA14 - These bits are compared in ISA 
mode against the memory address on the bus to 
determine if the ROM is being accessed, as a 


RA18 RA17 RA16 RA15 RAI4_ | 
0 0 1 1 1 


function of the ROM SIZE. ROM accesses are 
read only memory accesses defined by MEMRD* 
going low. 


For a full decode of the address space 
unspecified upper address lines have to be: A19 = 
"{", A20-A23 lines are not directly decoded, 
however ISA systems will only activate SMEMRD* 
only when A20-A23=0. 


All bits in this register are loaded from the serial 
EEPROM in ISA Mode only. In PCMCIA mode, 
the I/O base is set to the default value (as in ISA 
mode) as defined below. 


The I/O base decode defaults to 300h (namely, 
the high byte defaults to 18h). ROM SIZE defaults 
to 01. ROM decode defaults to CCO00 (namely 
the low byte defaults to 67h). 
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OFFSET | NAME | CTYPE SYMBOL 
4 THROUGH 9 INDIVIDUAL ADDRESS REGISTERS READWRITE |  _IAR___ 


These registers are loaded starting at word 
location 20h of the EEPROM upon hardware reset 
or EEPROM reload. The registers can be 
modified by the software driver, but a STORE 


Individual Address contents. 


Bit 0 of Individual Address 0 register corresponds 
to the first bit of the address on the cable. 


operation will not modify the EEPROM 
ADDRESS 0 
0 0 0 0 0 0 0 0 


ADDRESS 1 


0 0 0 0 


0 0 0 0 


ADDRESS 2 


0 0 0 0 


0 0 0 0 


ADDRESS 3 


0 0 0 0 


0 0 0 0 


ADDRESS 4 


0 0 0 0 


0 0 0 0 


ADDRESS 5 


0 0 0 0 


0 0 0 0 
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OFFSET | CNAME TYPE SYMBOL 
| A. | GENERAL ADDRESS REGISTERS READWRITE | GPR | 


HIGH DATA BYTE 


0 0 0 0 0 0 0 0 
LOW DATA BYTE 

0 0 0 0 0 0 0 0 
This register can be used as a way of storing and program the Individual Address area_ of the 
retrieving non-volatile information in the EEPROM EEPROM, that is normally protected from 
to be used by the software driver. The storage is accidental Store operations. 
word oriented, and the EEPROM word address to 
be read or written is specified using the six lowest This register will be used for EEPROM read and 
bits of the Pointer Register. write only when the EEPROM SELECT bit in the 

Control Register is set. This allows generic 

This register can also be used to sequentially EEPROM read and write routines that do not 


affect the basic setup of the LAN91C96. 
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OFFSET | CNAME TYPE SYMBOL 
= Gis? CONTROL REGISTER READ/WRITE | CTR | 


RCV_ PWRDN | WAKEUP_ AUTO 
une nm chat 
Tt: oF i =EPROM Taare Si0nE 
Phare raat res SELECT 


RCV_BAD - When set, bad CRC packets are 
received. When clear bad CRC packets do not 
generate interrupts and their memory is released. 


PWRDN - Active high bit used to put the Ethernet 
function in power down mode. 


oe by: 
A write to any register in the LAN91C96 I/O 
space. 

2. Hardware reset. This bit is combined with the 


Pwrdwn bit in ECSR and with the powerdown 
bit to determine when the function is powered 
down. 


WAKUP_EN - Active high bit used to enable the 
controller in the appropriate power down modes to 
power up and set the WAKEUP bit in the EPHSR 
-> generate an EPH interrupt(if not masked). 
When clear (0), no “Magic Packet” scanning is 
done on receive packets. 


Note: Setting (1) the bit is meaningful only if the 
function is enabled (Enable Function bit in COR; 
offset 8000h) 


AUTO RELEASE - When set, transmit pages are 
released by transmit completion if the 
transmission was successful (when TX_SUC is 
set). In that case there is no status word 
associated with its packet number, and successful 
packet numbers are not even written into the TX 
COMPLETION FIFO. 


A sequence of transmit packets will only generate 
an interrupt when the sequence is completely 
transmitted (TX EMPTY INT will be set), or when a 
packet in the sequence experiences a fatal error 
(TX INT will be set). Upon a fatal error TXENA is 
cleared and the transmission sequence stops. 
The packet number that failed is the present in the 
FIFO PORTS register, and its pages are not 
released, allowing the CPU to restart the 
sequence after corrective action is taken. 


LE ENABLE - Link Error Enable. When set it 
enables the LINK_OK bit transition as one of the 
interrupts merged into the EPH INT bit. Defaults 
low (disabled). Writing this bit also serves as the 
acknowledge by clearing previous LINK interrupt 
conditions. 


CR ENABLE - Counter Roll over Enable. When 
set it enables the CTR_ROL bit as one of the 
interrupts merged into the EPH INT bit. Defaults 
low (disabled). 


TE ENABLE - Transmit Error Enable. When set it 
enables Transmit Error as one of the interrupts 
merged into the EPH INT bit. Defaults low 
(disabled). Transmit Error is any condition that 
clears TXENA with TX_SUC staying low as 
described in the EPHSR register. 

EEPROM SELECT - This bit allows the CPU to 
specify which registers the EEPROM RELOAD or 
STORE refers to. When high, the General 
Purpose Register is the only register read or 
written. When low, the RELOAD and STORE 
functions are enabled. 


RELOAD 
The LAN91C96 reads the Configuration, Base 
and Individual Address, and STORE writes the 
Configuration and Base registers. 


Also when set it will read the EEPROM and 
update relevant registers with its contents. This 
bit then Clears upon completing the operation. 
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STORE 
The STORE LAN91C96 bit when set, stores 
the contents of all relevant registers in the 
serial EEPROM. This bit is cleared upon 
completing the operation. 


Note: When an EEPROM access is in progress 
the STORE and RELOAD bits will be read back 
as high. The remaining 14 bits of this register will 
be invalid. During this time, attempted read/write 
operations, other than polling the EEPROM 
status, will NOT have any effect on the internal 
registers. The CPU can resume accesses to the 
LAN91C96 after both bits are low. A worst case 
RELOAD operation initiated by RESET or by 
software takes less than 750usec in either mode. 


VO SPACE - BANK2 


OFFSET 


SYMBOL 
WRITE ONLY 
BUSY bit readable 


| CNAME 
(ae eee MMU COMMAND REGISTER 


RX FIFO control. 
determine the command issued as described 
below: 


This register is used by the CPU to control the 
memory allocation, de-allocation, TX FIFO and 


MMUCR 


The three command bits 


COMMAND N2 Ni NO/ 
BUSY 
ee a ee ee es ee ee 
0 


COMMAND SET: 
WxyZ 
0000 0) - NOOP - NO OPERATION - 


0010 2) - ALLOCATE MEMORY FOR TX - 
N2, N1, NO defines the amount of memory 
requested as (value + 1) 256* bytes. Namely N2, 
Ni, NO = 1 will request 2 256* = 512 bytes. Valid 
range for N2, N1, NO is 0 through 5. A shift-based 
divide by 256 of the packet length yields the 
appropriate value to be used as N2, N1 and NO. 
Immediately generates a completion code at the 
ALLOCATION RESULT REGISTER. Can 
optionally generate an interrupt on successful 
completion. The allocation time can take worst 
case (N2, N1, NO + 2)* 200us. 


0100 4) - RESET MMU TO INITIAL STATE - 
Frees all memory allocations, clears relevant 
interrupts, resets packet FIFO pointers. 


0110 6) - REMOVE FRAME FROM TOP OF 
RX FIFO- To be issued after CPU has completed 
processing of present receive frame. This 
command removes the receive packet number 
from the RX FIFO and brings the next receive 
frame (if any) to the RX area (output of RX FIFO). 


0111 7) - REMOVE FRAME FROM TOP OF 
TX FIFO- To be issued ONLY after the Host 
disabled the transmitter and has completed 
processing of the present transmit frame. Note: 
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Determining Transmit completion is done by 
polling the TEMPTY bit in the Transmit FIFO Port 
Register. This command removes the Transmit 
packet number from the TX FIFO and brings the 
next Transmit frame (if any) to the TX area (output 
of TX FIFO). 


1000 8) - REMOVE AND RELEASE TOP 
OF RX FIFO - Like 6) but also releases all 
memory used by the packet presently at the RX 
FIFO output. 

1010 A) - RELEASE SPECIFIC PACKET - 
Frees all pages allocated to the packet specified 
in the PACKET NUMBER REGISTER. Should not 
be used for frames pending transmission. 
Typically used to remove transmitted frames, after 
reading their completion status. Can be used 
following 6 (to release receive packet memory in a 
more flexible way than 8). 


1100 C) - ENQUEUE PACKET NUMBER 
INTO TX FIFO - This is the normal method of 
transmitting a packet just loaded into RAM. The 
packet number to be enqueued is taken from the 
PACKET NUMBER REGISTER. 


1110 F) - RESET TX FIFOs - This command 
will reset both TX FIFOs. The TX FIFO holding 
the packet numbers awaiting transmission and the 
TX Completion FIFO. This command provides a 
mechanism for canceling packet transmissions, 
and reordering or bypassing the transmit queue. 


The RESET TX FIFOs command should only be 
used when the transmitter is disabled. Unlike the 
RESET MMU command, the RESET TX FIFOs 
does not release any memory. 


Note 1: Only command 2 uses N2, N1 and NO. 


Note 2: When using the RESET TX FIFOS 
command, the CPU is responsible for releasing 
the memory associated with outstanding packets, 
or re-enqueuing them. Packet numbers in the 
completion FIFO can be read via the FIFO ports 
register before issuing the command. 


Note 3: MMU commands releasing memory 
(commands 8 and A) should only be issued if the 
corresponding packet number has memory 
allocated to it. 


COMMAND SEQUENCING 


A second allocate command (command 2) should 
not be issued until the present one has 
completed. Completion is determined by reading 
the FAILED bit of the allocation result register or 
through the allocation interrupt. A second release 
command (commands 8 and A) should not be 
issued if the previous one is still being processed. 
The BUSY bit indicates that a release command is 
in progress. After issuing command A, the 


57 


contents of the PNR should not be changed until 
BUSY goes low. After issuing command 8, 
command 6 should not be issued until BUSY goes 
low. BUSY BIT - Readable at bit “O” of the MMU 
command register address. When set indicates 
that MMU is still processing a release command. 
When clear, MMU has already completed last 
release command. BUSY and FAILED bits are 
set upon the trailing edge of command. 


/O SPACE - BANK2 


OFFSET [| NAME CTYPE SYMBOL 
ee ae AUTO TX START REGISTER READ/WRITE AUTOTX 


AUTO TX START REGISTER - This register 
specifies the value, in 16 byte multiples of when 
the transmit state machine starts a _ transmit 
operation when the associated transmit buffer is 
enqueued into the transmit FIFO. 


The AutoTx bit as well as the ETEN bit must both 
be set in the pointer register in order for this 
register to be utilized. Note: This register must be 
non-zero for the Auto-Tx function to work. A value 
of 0” will disable this function. The RCV bit in the 
Pointer register must be zero (0) as well. The RCV 
bit must be cleared so that the packet being 
written and enqueued is being selected by the 
PNR and not the receive FIFO. 


D2. |. — Di — 1] Do. — | 
ae a 
Register Operation: When Early Transmit is 
enabled via the ETEN bit in the pointer register, 
the host is able to enqueue a buffer for transmit 
operation before all of the transmitted data is 
copied into the LAN91C96 dual ported RAM. In 
the case of the AutoTx bit being cleared, the host 
must manually start the transmit operation. When 
the AutoTx bit is set, the EPH Transmit engine 
compares the number of bytes moved into the 
transmit packet buffer with the value of the Auto 
TX Start Register to start transmit operation. This 
eliminates the requirement for the host to 
manually start the transmit. 


VO SPACE - BANK2 


OFFSET. [| NAME | CTYPE SYMBOL 
= Saas PACKET NUMBER REGISTER READWRITE [|  =PNR iJ 


RESERVED | [| PACKET NUMBER AT TX AREA 
0 0 0 0 0 0 0 0 


PACKET NUMBER AT TX AREA - The value register is cleared by a RESET or a RESET MMU 
written into this register determines which packet Command. 

number is accessible through the TX area. Some 

MMU commands use the number stored in this RESERVED - This bit is reserved. 

register as the packet number parameter. This 


VO SPACE - BANK2 


OFFSET. [| CNAME CTYPE SYMBOL 
| 3 | ALLOCATION RESULT REGISTER READONLY [| ARR | 


This register is updated upon an ALLOCATE MEMORY MMU command. 


Be aaa ee ALLOCATED PACKET NUMBER 

1 0 0 0 0 0 0 0 
FAILED - A 0” indicates a successful allocation ALLOCATED PACKET NUMBER - Packet 
completion. If the allocation fails the bit is set and number associated with the last memory 
only cleared when the pending allocation is allocation request. The value is only valid if the 
satisfied. Defaults high upon reset and reset FAILED bit is clear. 


MMU command. For polling purposes, the 
ALLOC_INT in the Interrupt Status Register Note: For software compatibility with future 


should be used because it is synchronized to the versions, the value read from the ARR after an 

read operation. Sequence: allocation request is intended to be written into the 
1) Allocate Command PNR as is, without masking higher bits (provided 
2) Poll ALLOC_INT bit until set FAILED = “O”). 


3) Read Allocation Result Register 
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0 SPACE - BANK2 


OFFSET 


| CNAME 
i aa FIFO PORTS REGISTER READ ONLY 


This register provides access to the read ports of 
the Receive FIFO and the Transmit completion 


TYPE SYMBOL 
| FIFO 


FIFO 


FIFO. The packet numbers to be processed by 
the interrupt service routines are read from this 
register. 


REMPTY | | | RX FIFO PACKET NUMBER 
1 0 0 


0 


0 0 0 0 


TEMPTY | =——sd Ts TX FIFO/DONE PACKET NUMBER 
1 0 0 


0 


REMPTY - No receive packets queued in the RX 
FIFO. For polling purposes, uses the RCV_INT 
bit in the Interrupt Status Register. 


TOP OF RX FIFO PACKET NUMBER - Packet 
number presently at the output of the RX FIFO. 
Only valid if REMPTY is clear. The packet is 
removed from the RX FIFO using MMU 
Commands 6) or 8). 


TEMPTY - No transmit packets in completion 
queue. For polling purposes, uses the TX_INT bit 
in the Interrupt Status Register. 


0 0 0 0 


TX DONE PACKET NUMBER - Packet number 
presently at the output of the TX Completion 
FIFO. Only valid if TEMPTY is clear. The packet is 
removed when a TX INT acknowledge is issued. 


Note: 

1) For software compatibility with future 
versions, the value read from each FIFO 
register is intended to be written into the PNR 
as is, without masking higher bits (provided 
TEMPTY and REMPTY = 0 respectively). 


VO SPACE - BANK2 


OFFseT [| CNAME —CCC‘CL;SsC $TYPE; SYMBOL 
| PTR 


== sae POINTER REGISTER READ/WRITE 


PTR 


POINTER HIGH 


CV AUTO READ ETEN AutoTx 
INCR. 
0 0 0 0 0 


0 0 0 


POINTER LOW 


0 0 0 0 


POINTER REGISTER - The value of this register 
determines the address to be accessed within the 
transmit or receive areas. It will auto-increment on 
accesses to the data register when AUTO INCR. 
is set. The increment is by one for every byte 
access, and by two for every word access. When 
RCV is set the address refers to the receive area 
and uses the output of RX FIFO as the packet 
number, when RCV is clear the address refers to 
the transmit area and uses the packet number at 
the Packet Number Register. 


READ bit - Determines the type of access to 
follow. If the READ bit is high the operation 
intended is a read. If the READ bit is low the 
operation is a write. Loading a new pointer value, 
with the READ bit high, generates a pre-fetch into 
the Data Register for read purposes. 


Read-back of the pointer will indicate the value of 
the address last accessed by the CPU (rather 
than the last pre-fetched). This allows any 
interrupt routine that uses the pointer, to save it 
and restore it without affecting the process being 
interrupted. 


The Pointer Register should not be loaded until 
400ns after the last write operation to the Data 
Register to ensure that the Data Register FIFO is 
empty. On reads, if IOCHRDY is not connected to 
the host, the Data Register should not be read 
before 400ns after the pointer was loaded to allow 
the Data Register FIFO to fill. 


0 0 0 0 


If the pointer is loaded using 8 bit writes, the low 
byte should be loaded first and the high byte last. 


ETEN bit - When set enables EARLY Transmit 
underrun detection. Normal operation when 
clear. 


If TCR bit 14 (ETEN-TYPE) is zero and this bit is 
set, the Early transmit underrun function will be 
enabled as it was implemented in_ the 
LAN91C94: 


"The Early Transmit function allows the CPU to 
enqueue the first transmit packet before it is fully 
loaded in packet memory. The loading 
Operation proceeds in parallel with the 
transmission, and in the case that the transmitter 
gets ahead of the CPU, the LAN91C94 will 
prevent the transmission of erroneous data by 
forcing an Underrun condition. Underruns will 
be triggered by starving the transmit DMA if the 
LAN91C96 detects that the DMA TX address 
exceeds the pointer address.” 


If TCR bit 14 (ETEN-TYPE) is zero and this bit is 
set, the Early transmit underrun function defined 
as follows: 


“For underrun detection purposes the RAM 
logical address and packet numbers of the 
packet being loaded are compared against the 
logical address and packet numbers of the 
packet being transmitted. If the packet numbers 
match and the logical address of the packet 
being transmitted exceeds the address being 


loaded the LAN91C96 will prevent the 
transmission of erroneous data by forcing an 
Underrun condition. Underruns will be triggered 
by starving the transmit DMA if the LAN91C96 
detects that the DMA TX address exceeds the 
pointer address.” 


Note: ETEN-TYPE (bit 14) in TCR may be 
implemented for Rev. ID 6 only. In the absence of 
ETEN-TYPE in TCR, ETEN will have the definition 
as ETEN-TYPE were clear only. 
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AutoTx bit - When set, enables the transmit state 
machine to Automatically start a_ transmit 
operation with no host intervention determined by 
the number of bytes being copied into the transmit 
buffer enqueued in the transmit FIFO. The ETEN 
bit must also be set in order for this function to be 
enabled and the RCV bit must be cleared (0). 
When _ the Auto TX bit is cleared, the transmit 
state machine must manually be enabled to 
enqueue a transmit buffer. 


If AUTO INCR. is not set, the pointer must be 
loaded with an even value. 


VO SPACE - BANK2 


OFFSET 
8&A 


Po NAME CTYPE 
DATA REGISTER READ/WRITE 


SYMBOL 
DATA 


DATA HIGH 
DATA LOW 


DATA REGISTER - Used to read or write the data 
buffer byte/word presently addressed by the 
pointer register. 


This register is mapped into two uni-directional 
FIFOs that allow moving words to and from the 
LAN91C96 regardless of whether the pointer 
address is even or odd. Data goes through the 
write FIFO into memory, and is pre-fetched from 
memory into the read FIFO. If byte accesses are 
used, the appropriate (next) byte can be accessed 
through the Data Low 
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or Data High registers. The order to and from the 
FIFO is preserved. Byte and word accesses can 
be mixed on the fly in any order. 


This register is mapped into two consecutive word 
locations to facilitate the usage of double word 


move instructions. The DATA register is 
accessible at any address in the 8 through Ah 
range, while the number of bytes being 


transferred are determined by AO and nSBHE in 
ISA mode, and by AO, nCE1 and nCE2 in 
PCMCIA mode. 


/O SPACE - BANK2 


OFFSET [| CNAME CTYPE SYMBOL 
INTERRUPT STATUS REGISTER READ ONLY 


RX_ TX 
TX IDLE | ERCV EPH OVRN ALLOC | EMPTY 
INT INT INT INT INT INT TX INT | RCV INT 
0 0 0 0 0 1 0 0 


OFFSET TYPE SYMBOL 
INTERRUPT ACKNOWLEDGE REGISTER | WRITE ONLY 


RX_ TX EMPTY 
ERCV OVRN INT 
INT INT TX INT 
OFFSET | CNAME TYPE SYMBOL 
INTERRUPT MASK REGISTER READ/WRITE 


RX_ TX 
TX IDLE | ERCV EPH OVRN ALLOC | EMPTY 
INT INT INT INT INT INT TX INT | RCV INT 
0 0 0 0 0 0 0 0 


This register can be read and written as a word or as two individual bytes. 
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The Interrupt Mask Register bits enable the 
appropriate bits when high and disable them when 
low. An enabled bit being set will cause a 
hardware interrupt. 


EPH INT - Set when the Ethernet Protocol 
Handler section indicates one out of various 
possible special conditions. This bit merges 
exception type of interrupt sources, whose service 
time is not critical to the execution speed of the 
low level drivers. The exact nature of the interrupt 
can be obtained from the EPH Status Register 
(EPHSR), and enabling of these sources can be 
done via the Control Register. 


The possible sources are: 

LINK_OK transition. 

CTR_ROL - Statistics counter roll over. 

TXENA cleared - A fatal transmit error occurred 
forcing TXENA to be cleared. TX_SUC will be low 

and the specific reason will be reflected by the 
bits: 

TXUNRN - Transmit underrun. 

SQET - SQE Error. 

LOST CARR - Lost Carrier. 

LATCOL - Late Collision. 

16COL - 16 collisions. 

WAKE_UP - “Magic Packet” is received if enabled 


RX_OVRN INT - Set when the receiver overruns 
due to a failed memory allocation. The RX_OVRN 
INT bit latches the overrun condition for the 
purpose of being polled or generating an interrupt, 
and will only be cleared by writing the 
acknowledge register with the RX_OVRN INT bit 
set. 


ALLOC INT - Set when an MMU request for TX 
pages allocation is completed. 


This bit is the complement of the FAILED bit in the 
ALLOCATION RESULT register. The ALLOC INT 
ENABLE bit should only be set following an 
allocation command, and cleared upon servicing 
the interrupt. 

TX EMPTY INT - Set if the TX FIFO goes empty, 
can be used to generate a single interrupt at the 
end of a sequence of packets enqueued for 
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transmission. This bit latches the empty 
condition, and the bit will stay set until it is 
specifically cleared by writing the acknowledge 
register with the TX EMPTY INT bit set. If a real 
time reading of the FIFO empty is desired, the bit 
should be first cleared and then read. 


The TX EMPTY INT ENABLE should only be set 
after the following steps: 
1) A packet is enqueued for transmission. 


2) The previous empty condition is cleared 
(acknowledged). 
TX INT - Set when at least one packet 


transmission was completed. The first packet 
number to be serviced can be read from the FIFO 
PORTS register. The TX INT bit is always the 
logic complement of the TEMPTY bit in the FIFO 
PORTS register. 


After servicing a packet number, its TX INT 
interrupt is removed by writing the Interrupt 
Acknowledge Register with the TX INT bit set. 


RCV INT - Set when a receive interrupt is 
generated. The first packet number to be 
serviced can be read from the FIFO PORTS 
register. The RCV INT bit is always the logic 
complement of the REMPTY bit in the FIFO 
PORTS register. 


ERCV INT - Early receive interrupt. Set whenever 
a receive packet is being received, and the 
number of bytes received into memory exceeds 
the value programmed as ERCV THRESHOLD 
(Bank 3, Offset Ch). ERCV INT stays set until 
acknowledged by writing the INTERRUPT 
ACKNOWLEDGE REGISTER with the ERCV INT 
bit set. 


TX IDLE INT - Transmit Idle interrupt. Set when 
the transmit state machine is not active. This bit is 
used under the condition where the TX FIFO is 
still NOT empty, the transmitter is disabled and 
the host wants to determine when the transmitter 
is completed with the current transmit packet. This 
event usually happens when the host wants to 


insert at the head of the transmit queue a flow 
control frame for example. 


Typical flow of events/Condition: 
The transmit FIFO is not empty 


2) The transmit DONE FIFO is either empty or 
not empty 

3) The transmit engine is either active or not 
active 


Flow of events for an insertion of a transmit packet 
(Typical Application Example: Flow Control 
packet): 

Disable the Transmitter 


2) Remove and release any “transmit done” 
packets in the TX DONE FIFO 
3) Via polling or an interrupt driven event, 


determine status of TX IDLE INT bit and wait 
until this bit is set. This will determine when 
the transmitter is truly done with all transmit 
events. 
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4) Remove and store (if any, in software) Packet 
numbers from the transmit FIFO. (These 
packets will later be restored into the TX 
FIFO after the control frame is inserted into 
the front of the TX FIFO). 

5) Enable Transmitter 

6) En-queue packet into TX FIFO 

7) En-queue rest of packets, if any, into TX 


FIFO (restore TX FIFO) 


Note: If the driver uses AUTO RELEASE mode it 
should enable TX EMPTY INT as well as TX INT. 
TX EMPTY INT will be set when the complete 
sequence of packets is transmitted. TX INT will be 
set if the sequence stops due to a fatal error on 
any of the packets in the sequence. 


Note: For edge triggered systems, the Interrupt 
Service Routine should clear the Interrupt Mask 
Register, and only enable the appropriate 
interrupts after the interrupt source is serviced 
(acknowledged). 
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(0 SPACE - BANK 3 


OFFSET. [| NAME | CTYPE 
0 THROUGH 7 MULTICAST TABLE READ/WRITE 


SYMBOL 
MT 


Multicast Table 0 


Multicast Table 1 


Multicast Table 2 


Multicast Table 3 


Multicast Table 4 


Multicast Table 5 


Multicast Table 6 


oO oO oO oT oO oO] |e 
oO oO OT oT oO oO] |e 
oOo oO OT oOo oO jo] |e 
O]C JOJc J/OJc JOJC JOJC JOJ|cC |O 
oO} jo] jo; OY] JO] JO] JO 
oj oO oO oT oO oO] |e 
oO oO oO oT oO oO] |e 
ao oO OT oT oO Io] |e 


Multicast Table 7 


oO 
S&S 
S 
eS 


The 64 bit multicast table is used for group 
address filtering. The hash value is defined as the 
six most significant bits of the CRC of the 
destination addresses. The three msb's determine 
the register to be used (MTO-7), while the other 
three determine the bit within the register. If the 
appropriate bit in the table is set, the packet is 
received. 
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0 0 


oO 
& 


If the ALMUL bit in the RCR register is set, all 
multicast addresses are received regardless of 
the multicast table values. Hashing is for a partial 
group address filtering scheme. Additional filtering 
is done in software. But the hash value being a 
part of the receive status word, the receive routine 
can reduce the search time significantly. With the 
proper memory structure, the search is limited to 
comparing only the multicast addresses that have 
the actual hash value in question. 


VO SPACE - BANK3 


OFFSET 


This register contains status bits and control bits 
for management of different transceivers modules. 
Some of the pins are shared’ with 


Po CUNAME | CTYPE SYMBOL 
MANAGEMENT INTERFACE READ/WRITE MGMT 


the serial EEPROM interface. Management is 
software controlled, and does not use the serial 
EEPROM and the transceiver management 
functions at the same time. 


PO XNDEC | 1082 | 1081 | OS0_ 


0 0 1 1 


po MOE CLK | MD! | MDOT 
0 0 i i 0 0 0 0 


nXNDEC - Read only bit reflecting the status of 
the nXENDEC pin. 


IOS0-2 - Read only bits reflecting the status of the 
1OS0-2 pins. 


MDO - The value of this bit drives the EEDO pin 
when MDOE=1. 


MDCLK - The value of this bit drives the EESK pin 
when MDOE=1. 


MDOE - When this bit is high pins EEDO EECS 
and EESK will be used for transceiver 
management functions, otherwise the pins 
assume the EEPROM values. 


| SSC MODE-0———Cti‘“L’SC“C“(‘S#:SWMQDE=1_— 
EEDO Serial EEPROM Data Out Bit MDO 
EESK Serial EEPROM Clock Bit MCLK 
EECS Serial EEPROMChipSelect [| #0 | 
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/O SPACE - BANK3 


OFFSET | CNAME TYPE SYMBOL 
a ra REVISION REGISTER READ ONLY 
0 0 1 1 0 0 1 1 
0 1 0 0 0 0 0 0 

CHIP ID VALUE DEVICE 

LAN91C90/LAN91 C92 

LAN91C94 

LAN91C95 

LAN91C96 

LAN91C100 

a: LAN91C100FD 

ee ae LAN91C110 
CHIP - Chip ID. Can be used by software drivers Note *: The LAN91C96 shares the same chip ID 
to identify the device used. (#4) as the LAN91C94. The Rev. ID for the 


LAN91C96 will begin from six (#6). 
REV - Revision ID. Incremented for each revision 
of a given device. 
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VO SPACE - BANK3 


OFFSET 


| OFFSET. [| CNAME | CTYPE SYMBOL 
EARLY RCV REGISTER READ/WRITE [| —ERCV 


ERCV 


RCV COUNTER 


0 0 1 1 
RCV 
foscen | | 
0 0 0 1 


RCV DISCRD - Set to discard a packet being 
received. 


ERCV THRESHOLD - Threshold for ERCV 
interrupt. Specified in 64 byte multiples. 
Whenever the number of bytes written in 
memory for the presently received packet 
exceeds the ERCV THRESHOLD, ERCV INT bit 
of the INTERRUPT STATUS REGISTER is set. 
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0 0 1 1 
ERCV THRESHOLD 


1 | 1 1 


Rev Counter - This 8 bit value is the “Real Time” 
count, in bytes, of the current Receive packet 
(this includes the 4 bytes of status and packet 
length). The count is rounded to the nearest 
Nibble (16 bytes). The Counter is multiplied by 
16 decimals to obtain the number of bytes 
currently received. 


Note: The value of the RCV Counter is in real 
time asynchronous format (i.e. The value is 
constantly changing). It is recommended that the 
register be read multiple times to get an 
accurate reading. Note: The Rcv Counter 
register will return a value of “O” when no receive 
event is occurring. 


THEORY OF OPERATION 


The concept of presenting the shared RAM as a 
FIFO of packets, with a memory management unit 
allocating memory on aé per packet basis 
responds to the following needs: 


Memory allocation for receive vs. transmit - A fixed 
partition between receive and transmit area would 
not be efficient. Being able to dynamically 
allocate it to transmit and receive represents 
almost the equivalent of duplicating the memory 
size for some workstation type of drivers. 


Software overhead - By presenting a FIFO of 
packets, the software driver does not have to 
waste any time in calculating pointers for the 
different buffers that make up different packets. 
The driver usually deals with one packet at a time. 
With this approach, packets are accessible 
always at the same fixed address, and access is 
provided to any byte of the packet. 


Headers can be analyzed without reading out the 
entire packet. The packet can be moved in or out 
with a block move operation. 
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Multiple upper layer support - The LAN91C96 


facilitates interfacing to multiple upper layer 
protocols because of the receive packet 
processing _ flexibility. A_ receive lookahead 


scheme like ODI or NDIS drivers is supported by 
copying a small part of the received packet and 
letting the upper layer provide a pointer for the 
rest of the data. If the upper layer indicates it 
does not want the packet, it can be removed upon 
a single command. If the upper layer wants a 
specific part of the packet, a block move operation 
starting at any particular offset can be done. Out 
of order receive processing is also supported: if 
memory for one packet is not yet available, 
receive packet processing can continue. 


Efficiency - Lacking any level of indirection or 
linked lists of pointers, virtually all the memory is 
used for data. There are no descriptors, forward 
links and pointers at all. This simplicity and 
memory efficiency is accomplished without giving 
up the benefits of linked lists which is unlimited 
back-to-back transmission and reception without 
CPU intervention for as long as memory is 
available. 


FULL DUPLEX SUPPORT 


Full Duplex Ethernet operation refers to the 
ability of the network (or parts of it) to 
simultaneously transmit and receive packets. 
The CSMA/CD protocol used by Ethernet for 
accessing a shared medium is inherently half 
duplex , and so is the 10BASE-T physical layer 
where simultaneous transmit and receive activity 
is interpreted as a collision. 


The LAN91C96 supports two types of Full 
Duplex operation: 

1) Full Duplex mode for diagnostic purposes 
only, where the received packet is the 
transmit packet being looped back. This 
mode is enabled using the FDUPLX bit in 


the TCR. In this mode the CSMA/CD 
algorithm is used to gain access to the 
media. 

2) FDSE (Full Duplex Switched Ethernet). 


Enabled by FDSE bit in TCR bit. When the 
LAN91C96 is configured for FDSE, its 
transmit and receive paths will operate 
independently with Carrier Sense CSMA/CD 
function disabled. 


Note: In FDSE mode the packets are not 
looped back internally. The loopback (Full 
Duplex for Diagnostics(FDUPLX)) function of 
10BASE-T transceivers is permanently engaged. 
It presents the transmit pair waveform to the 
receive circuit internally. This function allows the 
receiver to see the controller's own transmission, 
not only to permit diagnostics, but also to ensure 
sure that the node defers to its own transmission 
- as specified in 802.3. 
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Behavior in FDSE mode 


No deferral - The transmit channel is 
dedicated and always available - The device 
transmits whenever it has a packet ready to 
be sent, while respecting the interframe 
spacing between transmit packets. 


A) 


There are no 
full duplex 


No collision detection - 
collisions in a switched 
environment. 


MAGIC PACKET SUPPORT 


If the WAKEUP_EN bit in the Control Register 
(Bank1, Offset C) is set, the controller will 
generate the interrupt If this bit is not set, this 
functionality is disabled. Setting (1) the bit is 
meaningful only if the function is enabled. 


When a magic packet is received, the Ethernet 
controller will generate an interrupt causing the 
host to initiate a service routine to find the 
source of the event. The Interrupt bit in the 
ECSR is also set if the host plans on polling the 
controller for Wakeup status. 


TYPICAL FLOW OF EVENTS FOR TRANSMIT 


S/W DRIVER 
ISSUE ALLOCATE MEMORY FOR TX - N 
BYTES - the MMU attempts to allocate N bytes 
of RAM. 
WAIT FOR SUCCESSFUL COMPLETION 
CODE - Poll until the ALLOC INT bit is set or 
enable its mask bit and wait for the interrupt. 
The TX packet number is now at the Allocation 
Result Register. 
LOAD TRANSMIT DATA - Copy the TX packet 
number into the Packet Number Register. Write 
the Pointer Register, then use a block move 
operation from the upper layer transmit queue 
into the Data Register. 
ISSUE "ENQUEUE PACKET NUMBER TO TX 
FIFO" - This command writes the number 
present in the Packet Number Register into the 
TX FIFO. The transmission is now enqueued. 
No further CPU intervention is needed until a 
transmit interrupt is generated. 


SERVICE INTERRUPT - Read Interrupt Status 
Register. If it is a transmit interrupt, read the TX 
Done Packet Number from the Fifo Ports 
Register. Write the packet number into the 
Packet Number Register. The corresponding 
status word is now readable from memory. _ If 
status word shows successful transmission, 
issue RELEASE packet number command to 
free up the memory used by this packet. 
Remove packet number from completion FIFO 
by writing TX INT Acknowledge Register. 
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CSMA/CD SIDE 


The enqueued packet will be transferred to the 
CSMA/CD block as a function of TXENA (in 
TCR) bit and of the deferral process state. 

Upon transmit completion the first word in 
memory is written with the status word. The 
packet number is moved from the TX FIFO into 
the TX completion FIFO. Interrupt is generated 
by the TX completion FIFO being not empty. 


{ 
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TYPICAL FLOW OF EVENTS FOR RECEIVE 


S/W DRIVER 
ENABLE RECEPTION - By setting the RXEN bit. 


SERVICE INTERRUPT - Read the Interrupt 
Status Register and determine if RCV INT is set. 
The next receive packet is at receive area. (Its 
packet number can be read from the FIFO Ports 
Register). The software driver can process the 
packet by accessing the RX area, and can move 
it out to system memory if desired. When 
processing is complete the CPU issues the 
REMOVE AND RELEASE FROM TOP OF RX 
command to have the MMU free up the used 
memory and packet number. 
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CSMA/CD SIDE 


A packet is received with matching address. 
Memory is requested from MMU. A packet 
number is assigned to it. Additional memory is 
requested if more pages are needed. 

The internal DMA logic generates sequential 
addresses and writes the receive words into 
memory. The MMU does the sequential to 
physical address translation. If overrun, packet 
is dropped and memory is released. 

When the end of packet is detected, the status 
word is placed at the beginning of the receive 
packet in memory. Byte count is placed at the 
second word. If the CRC checks correctly the 
packet number is written into the RX FIFO. The 
RX FIFO being not empty causes RCV INT 
(interrupt) to be set. If CRC is incorrect the 
packet memory is released and no interrupt will 
occur. 
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FIGURE 16 - DRIVER SEND AND ALLOCATE ROUTINES 
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MEMORY PARTITIONING 


Unlike other controllers, the LAN91C96 does not 
require a fixed memory partitioning between 
transmit and receive resources. The MMU 
allocates and de-allocates memory upon different 
events. An additional mechanism allows the CPU 
to prevent the receive process from starving the 
transmit memory allocation. 


Memory is always requested by the side that 
needs to write into it, that is: The CPU for transmit 
or the CSMA/CD for receive. The CPU can 
control the number of bytes it requests for transmit 
but it cannot determine the number of bytes the 
receive process is going to demand. 
Furthermore, the receive process requests will be 
dependent on network traffic, in particular on the 
arrival of broadcast and multicast packets that 
might not be for the node, and that are not subject 
to upper layer software flow control. 


In order to prevent unwanted traffic from using too 
much memory, the CPU can program a "memory 
reserved for transmit" parameter. If the free 
memory falls below the "memory reserved for 
transmit" value, MMU _ requests from the 
CSMA/CD block will fail and the packets will 
overrun and be ignored. Whenever enough 
memory is released, packets can be received 
again. If the reserved value is too large, the node 
might lose data which is an abnormal condition. If 
the value is kept at zero, memory allocation is 
handled on first-come first-served basis for the 
entire memory capacity. 


Note that with the memory management built into 
the LAN91C96, the CPU can dynamically program 
this parameter. For instance, when 
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the driver does not need to enqueue 
transmissions, it can allow more memory to be 
allocated for receive (by reducing the value of the 
reserved memory). Whenever the driver needs to 
burst transmissions it can reduce the receive 
memory allocation. The driver program the 
parameter as a function of the following variables: 


1) 
2) 


Free memory (read only register) 
Memory size (read only register) 


The reserved memory value can be changed on 
the fly. If the MEMORY RESERVED FOR TX 
value is increased above the FREE MEMORY, 
receive packets in progress are still received, but 
no new packets are accepted until the FREE 


MEMORY increases above the MEMORY 
RESERVED value. 
INTERRUPT GENERATION 


The interrupt strategy for the transmit and receive 
processes is such that it does not represent the 
bottleneck in the transmit and receive queue 
management between the software driver and the 
controller. For that purpose there is no register 
reading necessary before the next element in the 
queue (namely transmit or receive packet) can be 
handled by the controller. The transmit and 
receive results are placed in memory. 


The receive interrupt will be generated when the 
receive queue (FIFO of packets) is not empty and 
receive interrupts are enabled. This allows the 
interrupt service routine to process many receive 
packets without exiting, or one at a time if the ISR 
just returns after processing and removing one. 


There are two types of transmit 
strategies: 


1) 
2) 


interrupt 


One interrupt per packet. 
One interrupt per sequence of packets. 


The strategy is determined by how the transmit 
interrupt bits and the AUTO RELEASE bit are 
used. 


TX INT bit - Set whenever the TX completion FIFO 
is not empty. 


TX EMPTY INT bit - Set whenever the TX FIFO is 
empty. 


AUTO RELEASE - When set, successful transmit 
packets are not written into completion FIFO, and 
their memory is released automatically. 

1) One interrupt per packet: enable TX INT, set 
AUTO RELEASE=0. The software driver can 
find the completion result in memory and 
process the interrupt one packet at a time. 
Depending on the completion code the driver 
will take different actions. Note that the 
transmit process is working in parallel and 
other transmissions might be taking place. 
The LAN91C96 is virtually queuing the 
packet numbers and their status words. 


In this case, the transmit interrupt service routine 
can find the next packet number to be serviced by 
reading the TX DONE PACKET NUMBER at the 
FIFO PORTS register. This eliminates the need 
for the driver to keep a list of packet numbers 
being transmitted. The numbers are queued by 
the LAN91C96 and provided back to the CPU as 
their transmission completes. 
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One interrupt per sequence of packets: 
Enable TX EMPTY INT and TX INT, set 
AUTO RELEASE=1. TX EMPTY INT is 
generated only after transmitting the last 
packet in the FIFO. TX INT will be set ona 
fatal transmit error allowing the CPU to know 
that the transmit process has stopped and 
therefore the FIFO will not be emptied. 


This mode has the advantage of a smaller CPU 
overhead, and faster memory de-allocation. Note 
that when AUTO RELEASE=1 the CPU is not 
provided with the packet numbers that completed 
successfully. 


Note: The pointer register is shared by any 
process accessing the LAN91C96 memory. In 
order to allow processes to be interruptible, the 
interrupting process is responsible for reading the 
pointer value before modifying it, saving it, and 
restoring it before returning from the interrupt. 


Typically there would be three processes using 
the pointer: 


Transmit loading (sometimes interrupt driven) 
Receive unloading (interrupt driven) 
Transmit Status reading (interrupt driven). 


1) and 3) also share the usage of the Packet 
Number Register. Therefore saving and restoring 
the PNR is also required from interrupt service 
routines. 


POWER DOWN 


The LAN91C96 can enter power down mode by 
means of the PWRDWN pin (pin 68) or the 
PWRDN bit (Control Register, bit 13). The power 
down current is 8 mA. When in power down 
mode, the LAN91C96 will: 


e Stop the crystal oscillator 

e —- Tristate: Data Bus 
Interrupts(only by PWRDN bit) 
nlOCS16 
10BASE-T and AUI outputs 
Turn off analog bias currents 


0 X 0 
1 0 0 
1 1 0 


xX X 1 


nXENDEC PIN PWRDN PIN PWRDN BIT 


e Drive the EEPROM and ROM outputs 
inactive 
e Preserve contents of registers and memory 


The PWRDWN pin is internally gated with the 
RESET (RESET pin before de-glitching) and with 
the SRESET bit (COR bit 7). This gating function 
internally negates power down whenever RESET 
is high or SRESET is high to allow the oscillator to 
run during RESET. Except for this gating function, 
all other uses of the RESET pin use a de-glitched 
version of the signal as defined in the pin 
description section. 


Normal external ENDEC operation 
Normal internal ENDEC operation 
Powerdown - Normal mode restored by 
PWRDWYN pin going low 

Powerdown - Bit is cleared by a write 
access to any LAN91C96 register or by 


hardware reset 
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FUNCTIONAL DESCRIPTION OF THE BLOCKS 


MEMORY MANAGEMENT UNIT 


The MMU interfaces the on-chip RAM on one 
side and the arbiter on the other for address and 
data flow purposes. For allocation and de- 
allocation, it interfaces the arbiter only. 


The MMU deals with a single ported memory 
and is not aware of the fact that there are two 
entities requesting allocation and actually 
accessing memory. The mapping function done 
by the MMU is only a function of the packet 
number accessed and of the offset within that 
packet being accessed. It is not a function of 
who is requesting the access or the direction of 
the access. 


To accomplish that, memory accesses as well 
as MMU allocation and de-allocation requests 
are arbitrated by the arbiter block before 
reaching the MMU. 


Memory allocation could take some time, but the 
ALLOC INT bit in Interrupt Status Register is 
negated immediately upon allocation request, 
allowing the system to poll that register at any 
time. Memory  de-allocation § command 
completion indication is provided via the BUSY 
bit, readable through the MMU command 
register. 


The mapping and queuing functions of the MMU 
rely on the uniqueness of the packet number 
assigned to the requester. For that purpose the 
packet number assignment is centralized at the 
MMU, and a number will not be reused until the 
memory associated with it is released. It is clear 
that a packet number should not be released 
while the number is in the TX or RX packet 
queue. 


The TX and RCV FIFOs are deep enough to 
handle the total number of packets the MMU 
can allocate, therefore there is no need for the 


programmer or the hardware to check FIFO full 
conditions. 


ARBITER 


The function of the arbiter is to sequence packet 
RAM accesses as well as MMU requests in such a 
way that the on-chip single ported RAM and a single 
MMU can be shared by two parties. One party is 
the host CPU and the other party is the CSMA/CD 
block. 


The arbiter is address transparent, namely, any 
address can be accessed at any time. In order to 
exploit the sequential nature of the access, and 
minimize the access time on the system side, the 
CPU cycle is buffered by the Data Register rather 
than go directly to and from memory. Whenever a 
write cycle is performed, the data is written into the 
Data Register and will be written into memory as a 
result of that operation, allowing the CPU cycle to 
complete before the arbitration and memory cycle 
are complete. Whenever a read cycle is performed, 
the data is provided immediately from the Data 
Register, without having to arbitrate and complete a 
memory cycle. The present cycle results in an 
arbitration request for the next data location. 
Loading the pointer causes a similar pre-fetch 
request. 


This type of read-ahead and write-behind arbitration 
allows the controller to have a very fast access time, 
and would work without wait states for as long as 
the cycle time specification is satisfied. The values 
are 40 ns access time, and 185ns cycle time. 


By the same token, CSMA/CD cycles might be 
postponed. The worst case CSMA/CD latency for 
arbiter service is one memory cycle. The arbiter 
uses the pointer register as the CPU provided 
address, and the internal DMA address from the 
CSMA/CD side as the addresses to be provided to 
the MMU. 
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The data path routed by the arbiter goes 
between memory (the data path does not go 
through the MMU) on one side and either the 
CPU side bus or the data path of the CSMA/CD 
core. 


The data path between memory and the Data 
Register is in fact buffered by a small FIFO in 
each direction. The FIFOs beneath the Data 
Register can be read and written as bytes or 
words, in any sequential combination. The 
presence of these FIFOs makes sure that word 
transfers are possible on the system bus even if 
the address loaded into the pointer is odd. 


BUS INTERFACE 


The bus interface handles the data, address and 
control interfaces and is compliant with the ISA, 
PCMCIA, and 68000-interface specifications 
and allows 8 or 16 bit adapters to be designed 
with the LAN91C96 with no glue to interface the 
ISA or PCMCIA bus. 


The functions in this block include address 
decoding for I/O and ROM memory (including 
address relocation support) for ISA, data path 
routing, sequential memory address support, 
optional wait state generation, boot ROM 
support, EEPROM = setup function, bus 
transceiver control, and interrupt generation / 
selection. 


For ISA, I/O address decoding is done by 
comparing A15-A4 to the I/O BASE address 
determined in part by the upper byte of the 
BASE ADDRESS REGISTER, and _ also 
requiring that AEN be low. If the above address 
comparison is satisfied and the LAN91C96 is in 
16 bit mode, nlOCS16 will be asserted (low). 


A valid comparison does not yet indicate a valid I/O 
cycle is in progress, as the addresses could be 
used for a memory cycle, or could even glitch 
through a valid value. For ISA and PCMCIA, only 
when nlIORD or nlIOWR are activated the I/O cycle 
begins. 


In PCMCIA mode, A4-A15 are ignored for I/O 
decodes, which rely on the PCMCIA host, decoding 
for the slot. Input A10 for ISA is used as an output 
(nFWE) for PCMCIA to enable Flash Memory Write 
for programming the attribute memory. It is valid 
only when nWE is “0” and COR2 is “1”. nA11/nFCS 
is used to select the Flash Memory Chip. 


The LAN91C96 provides a glueless interface to a 
stripped down version of the Motorola 68000 
processor. This interface is limited to 16 bits only. 
None of the size or function pins are supported. 
The LAN91C96 functions as a slave and requires 
some of its pins pulled high or low for the interface 
to function. 


The SMC91C96 enters the 68000 interface mode 
when nlORD and nlOWR = are asserted 
simultaneously. Once the two are asserted 
together, the only way to return to the ISA 
interface is by hard resetting the chip. Notice that 
the chip is required to power up in ISA mode to 
use the 68000 interface. 


For the first chip access, the first transfer (to the 
91C96) must be a write as the controller uses this 
write to confirm the 68000 mode. The LAN91C96 
responds to addresses per the base address 
register contents (as in the ISA mode). 


WAIT STATE POLICY 


The LAN91C96 can work on most system buses 
without having to add wait states. The two 
parameters that determine the memory access 
profile are the read access time and the cycle time 
into the Data Register. 


The read access time is 40ns and the cycle time is 
185ns. If any one of them does not satisfy the 
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application requirements, wait states should be 
added. 


If the access time is the problem, IOCHRDY 
should be negated for all accesses to the 
LAN91C96. This can be _ achieved by 
programming the NO WAIT ST bit in the 
configuration register to “O”. The LAN91C96 will 
negate IOCHRDY for 100ns to 150ns on every 
access to any register. 


If the cycle time is the problem, programming 
NO WAIT ST as described before will solve it 
but at the expense of slowing down all 
accesses. The alternative is to let the 
LAN91C96 negate IOCHRDY only when the 
Data Register FIFOs require so. Namely, if NO 
WAIT ST is set, IOCHRDY will only be negated 
if a Data Register read cycle starts and there is 
less than a full word in the read FIFO, or if a 
write cycle starts and there is more than two 
bytes in the write FIFO. 


The cycle time is defined as the time between 
leading edges of read from the Data Register, or 
equivalently between trailing edges of write to 
the Data Register. For example, in an ISA 
system the cycle time of a 16 bit transfer will be 
at least 2 clocks for the I/O access to the 
LAN91C96 (+ one clock for the memory cycle) 
for a total of 3 clocks. In absolute time 


it means 375ns for an 8MHz bus, and 240ns for a 
12.5 MHz bus. 


The cycle time will not increase when configured for 
full duplex mode, because the CSMA/CD memory 
arbitration requests are sequenced by the DMA 
logic and never overlap. 


ARBITRATION CONSIDERATIONS 


The arbiter exploits the sequential nature of the 
CPU accesses to provide a very fast access time. 
Memory bandwidth considerations will have an 
effect on the CPU cycle time but no effect on 
access time. 


For normal 8MHz, 10MHz, and 12.5MHz ISA buses, 
as well as EISA normal cycles, the LAN91C96 can 
be accessed without negating ready. 


When write operations occur, the data is written into 
a FIFO. The CPU cycle can complete immediately, 
and the buffered data will be written into memory 
later. The memory arbitration request is generated 
as a function of that FIFO being not empty. The 
nature of the cycle requested (byte/word) is 
determined by the LSB of the pointer and the 
number of bytes in the FIFO. 


When read operations occur, words are pre-fetched 
upon pointer loading in order to have at least a word 
ready in the FIFO to be read. New pre-fetch cycles 
are requested as a function of the number of bytes 
in the FIFO. 
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For example, if an odd pointer value is loaded, 
first a byte is pre-fetched into the FIFO, and 
immediately a _ full word is _ pre-fetched 
completing three bytes into the FIFO. If the CPU 
reads a word, one byte will be left again a new 
word is pre-fetched. 


In the case of write, if an odd pointer value is 
loaded, and a full word is written, the FIFO holds 
two bytes, the first of which is immediately 
written into an odd memory location. If by that 
time another byte or word was written, there will 
be two or three bytes in the FIFO and a full word 
can be written into the now even memory 
address. 


When a CSMA/CD cycle begins, the arbiter will 
route the CSMA/CD DMA addresses to the 
MMU as well as the packet number associated 
with the operation in progress. In full-duplex 
mode, receive and transmit requests are 
alternated in such a way that the CPU arbitration 
cycle time is not affected. 


DMA BLOCK 


The DMA block resides between the CSMA/CD 
block and the arbiter. It can interface both the 
data path and the control path of the CSMA/CD 
block for different operations. 


Its functions include the following: 


e Start transmission into the 
CSMA/CD block. 

e Generate CSMA/CD side addresses for 
accessing memory during transmit and 
receive operations. 

e Generate MMU memory requests and verify 
SUCCESS. 

e Compute byte count and write it in first 
locations of receive packet. 

e Write transmit status word in first locations 
of transmit packet. 

e Determine if enough memory is available 
for reception. 


process 


De-allocate transmit memory after suitable 
completion. 
De-allocate 
conditions. 
Initiate retransmissions upon collisions (if less 
than 16 retries). 

Terminate reception and release memory if 
packet is too long. 


receive memory upon error 


The specific nature of each operation and its trigger 
event are: 


1) 
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TX operations will begin if TXENA is set and TX 
FIFO is not empty. The DMA logic does not 
need to use the TX PACKET NUMBER, it goes 
directly from the FIFO to the MMU. However 
the DMA logic controls the removal of the 
PACKET NUMBER from the FIFO. 

Generation of CSMA/CD side addresses into 
memory: Independent 11-bit counters are kept 
for transmit and receive in order to allow full- 
duplex operation. 

MMU requests for allocation are generated by 
the DMA logic upon reception. The initial 
allocation request is issued when the CSMA 
block indicates an active reception. If allocation 
succeeds, the DMA block stores the packet 
number assigned to it, and generates write 
arbitration requests for as long as_ the 
CSMA/CD FIFO is not empty. In parallel the 
CSMA/CD completes the address filtering and 
notifies the DMA of an address match. If there 
is no address match, the DMA logic will release 
the allocated memory and stop reception. 
When the CSMA/CD block notifies the DMA 
logic that a receive packet was completed, if 
the CRC is OK, the DMA will either write the 
previously stored packet number into the RX 
PACKET NUMBER FIFO (to be processed by 
the CPU), or if the CRC is bad the DMA will just 
issue a release command to the MMU (and the 
CPU will never see that packet). 

Packets with bad CRC can be received if the 
RCV_BAD bit in the configuration register is 
set. 

If AUTO_RELEASE is set, a release is issued 
by the DMA block to the MMU after a 


successful transmission (TX_SUCC set), 
and the TX completion FIFO is clocked 
together with the TX FIFO preventing the 
packet number from moving into the TX 
completion FIFO. 

6) Based on the RX counter value, if a receive 
packet exceeds 1532 bytes, reception is 
stopped by the DMA and the RX ABORT bit 
in the Receive Control Register is set. The 
memory allocated to the packet is 
automatically released. 

7) If an allocation fails, the CSMA/CD block 
will activate RX_OVRN INT upon detecting 
a FIFO full condition. RXEN will stay active 
to allow reception of subsequent packets if 
memory becomes available. The 
CSMA/CD block will flush the FIFO upon 
the new frame arrival. 


PACKET NUMBER FIFOS 


The transmit packet FIFO stores the packet 
numbers awaiting transmission, in the order 
they were enqueued. The FIFO is advanced 
(written) when the CPU issues the "enqueue 
packet number commana", the packet number 
to be written is provided by the CPU via the 
Packet Number Register. The number was 
previously obtained by requesting memory 
allocation from the MMU. The FIFO is read by 
the DMA block when the CSMA/CD block is 
ready to proceed on to the 


next transmission. By reading the TX EMPTY INT 
bit the CPU can determine if this FIFO is empty. 


The transmit completion FIFO stores the packet 
numbers that were already transmitted but not yet 
acknowledged by the CPU. The CPU can read the 
next packet number in this FIFO from the FIFO 
Ports Register. The CPU can remove a packet 
number from this FIFO by issuing a TX INT 
acknowledge. The CPU can determine if this FIFO 
is empty by reading the TX INT bit or the FIFO Ports 
Register. 


The receive packet FIFO stores the packet numbers 
already received into memory, in the order they 
were received. The FIFO is advanced (written) by 
the DMA block upon reception of a complete valid 
packet into memory. The number is determined the 
moment the DMA block first requests memory from 
the MMU for that packet. The first receive packet 
number in the FIFO can be read via the FIFO Ports 
Register, and the data associated with it can be 
accessed through the receive area. The packet 
number can be removed from the FIFO with or 
without an automatic release of its associated 
memory. 


The FIFO is read out upon CPU command (remove 
packet from top of RX FIFO, or remove and release 
command) after processing the receive packet in 
the receive area. 


The width of each FIFO is 5 bits per packet number. 
The depth of each FIFO equals the number of 
packets the LAN91C96 can handle (18). 
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The guideline is software transparency; the 
software driver should not be aware of different 
devices or FIFO depths. If the MMU memory 
allocation succeeded, there will be room in the 
transmit FIFO for enqueuing the packet. 
Conversely if there is free memory for receive, 
there should be room in the receive FIFO for 
storing the packet number. 


Note that the CPU can enqueue a transmit 
command with a packet number that does not follow 
the sequence in which the MMU assigned packet 
numbers. For example, when a transmission failed 
and it is retried in software, or when a receive 
packet is modified and sent back to the network. 
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FIGURE 18 - MMU PACKET NUMBER FLOW AND RELEVANT REGISTERS 
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CSMA BOCK 


The CSMA/CD block is first interfaced via its 
control registers in order to define its operational 
configuration. From then on, the DMA interface 
between the CSMA/CD block and memory is used 
to transfer data to and from its data path interface. 


For transmit, the CSMA/CD block will be asked to 
transmit frames as soon as they are ready in 
memory. It will continue transmissions until any of 
the following transmit error occurs: 


Collisions on same frame 

Late collision 

Lost Carrier sense and MON_CSN set 
Transmit Underrun 

SQET error and STP_SQET set 


a 


In that case TXENA will be cleared and the CPU 
should restart the transmission by setting it again. 
If a transmission is successful, TXENA stays set 
and the CSMA/CD is provided by the DMA block 
with the next packet to be transmitted. 


For receive, the CPU sets RXEN as a way of 
starting the CSMA/CD block receive process. The 
CSMA/CD block will send data after address 
filtering through the data path to the DMA block. 
Data is transferred into memory as it is received, 
and the final check on data acceptance is the 
CRC checking done by the CSMA/CD block. In 
any case, the DMA _ takes’ care of 
requesting/releasing memory for receive packets, 
as well as generating the byte count. 


The receive status word is provided by the 
CSMA/CD block and written in the first location of 
the receive structure by the DMA block. _ If 
configured for storing CRC in memory, the 
CSMA/CD unit will transfer the CRC bytes through 
the DMA interface, and then will be treated like 
regular data bytes. 

Note that the receive status word of any packet is 
available only through memory and is not 
readable through any other register. In order to let 
the CPU know about receive overruns, the 
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RX_OVRN INT is set and latched in the Interrupt 
Status Register, which is readable by the CPU at 
any time. 


The address filtering is done inside the CSMA/CD 
block. A packet will be received if the destination 
address is broadcast, or if it is addressed to the 
individual address of the LAN91C96, or if it is a 
multicast address and ALMUL bit is set, or if itis a 
multicast address matching one of the multicast 
table entries. If the PRMS bit is set, all packets 
are received. 


The CSMA/CD block is a full duplex machine, and 
when working in full duplex mode, the CSMA/CD 
block will be simultaneously using its data path 
transmit and receive interfaces. 


Statistical counters are kept by the CSMA/CD 
block, and are readable through the appropriate 
register. The counters are four bits each, and can 
generate an interrupt when reaching their 
maximum values. Software can use that interrupt 
to update statistics in memory, or it can keep the 
counter interrupt disabled, while relying on the 
transmit interrupt routine reading the counters. 
Given that the counters can increment only once 
per transmit, this technique is a good complement 
for the single interrupt per sequence strategy. 


The interface between the CSMA/CD block and 
memory is word oriented. Two bi-directional 
FIFOs make the data path interface. 


Whenever a normal collision occurs (less than 16 
retries), the CSMA/CD will trigger the backoff logic 
and will indicate the DMA logic of the collision. 
The DMA is responsible for restarting the data 
transfer into the CSMA/CD block regardless of 
whether the collision happened on the preamble 
or not. 


Only when 16 retries are reached, the CSMA/CD 
block will clear the TXENA bit, and CPU 
intervention is required. The DMA will not 
automatically restart data transfer in this case, 
nor will it transmit the next enqueued packet until 
TXENA is set by the CPU. The DMA will move 


the packet number in question from the TX FIFO 
into the TX completion FIFO. 


NETWORK INTERFACE 
The LAN91C96 includes both an AUI interface for 
thick and thin coax applications and a 10BASE-T 


interface for twisted pair applications. Functions 
common to both are: 


1) 
2) 


Manchester encoder/decoder to convert NRZ 
data to Manchester encoded data and back. 
A 32ms jabber timer to prevent inadvertently 
long transmissions. When ‘jabbing’ occurs, 
the transmitter is disabled, automatic 
loopback is disabled (in 10BASE-T mode), 
and a collision indication is given to the 
controller. The interface ‘unjabs' when the 
transmitter has been idle for a minimum of 
256 ms. 

A phase-lock loop to recover data and clock 
from the Manchester data stream with up to 
plus or minus 18ns of jitter. 
Diagnostic loopback capability. 
LED drivers for collision, 
reception, and jabber. 


transmission, 


10BASE-T 


The 10BASE-T interface conforms to the twisted 
pair MAU addendum to the 802.3 specification. 
On the transmission side, it converts the NRZ 
data from the controller to Manchester data and 
provides the appropriate signal level for driving the 
media. Signal are predistorted before 
transmission to minimize ISI. The collision 
detection circuitry monitors the simultaneous 
occurrence of received signals and transmitted 
data on the media. During transmission, data is 
automatically looped back to the receiver except 
during collision periods, in which case the input to 
the receiver is network data. During collisions, 
should the receive input go idle prior to the 
transmitter going idle, input to the receiver 
switches back to the transmitter within nine bit 
times. Following transmission, the transmitter 
performs a SQE test. This test exercises the 
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collision detection circuitry within the 10BASE-T 
interface. 


The receiver monitors the media at all times. It 
recovers the clock and data and passes it along to 
the controller. In the absence of any receive 
activity, the transmitter is looped back to the 
receiver. In addition, the receiver performs 
automatic polarity correction. The 10BASE-T 
interface performs link integrity tests per section 
14.2.1.7 of 802.3, using the following values: 


Link_loss_ timer: 64 ms 
Link_test_min_timer: 4 ms 
Link_count: 2 
Link_test_max_timer: 64 ms 


SONS 


The state of the link is reflected in the EPHSR. 
AUI 


The LAN91C96 also provides a standard six wire 
AUI interface to a coax transceiver. 


PHYSICAL INTERFACE 


The internal physical interface (PHY) consists of 
an encoder/decoder (ENDEC) and an internal 
10BASE-T transceiver. The ENDEC also 
provides a standard 6-pin AUI interface to an 
external coax transceiver for 10BASE-2 and 
10BASE-5 applications. The internal signals 
between MAC and the PHY can be routed to pins 
by asserting the nXENDEC pin low. This 
feature allows the interface to an external ENDEC 
and transceiver. The PHY functions can be 
divided into transmit and receive functions. 


TRANSMIT FUNCTIONS 

Manchester Encoding 

The PHY encodes the transmit data received from 
the MAC. The encoded data is directed internally 


to the selected output driver for transmission over 
the twisted-pair network or the AUI cable. Data 


transmission and encoding is initiated by the 
Transmit Enable input, TXE, going low. 


Transmit Drivers 


The encoded transmit data passes through to the 
transmit driver pair, TPETXP(N), and _ its 
complement, TPETXDP(N). Each output of the 
transmit driver pair has a source resistance of 10 
ohms maximum and a current rating of 25 mA 
maximum. The degree of predistortion is 
determined by the termination resistors; the 
equivalent resistance should be 100 ohms. 


Jabber Function 


This integrated function prevents the DTE from 
locking into a continuous transmit state. In 
10BASE-T mode, if transmission continues 
beyond the specified time limit, the jabber function 
inhibits further transmission and asserts the 
collision indicator nCOLL. The limits for jabber 
transmission are 20 to 15 ms in 10BASE-T mode. 
In the AUI mode, the jabber function is performed 
by the external transceiver. 
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SQE Function 


In the 10BASE-T mode, the PHY supports the 
signal quality error (SQE) function. At the end of a 
transmission, the PHY asserts the nCOLL signal 
for 10+/-5 bit times beginning 0.6 to 1.6ms after 
the last positive transition of a transmitted frame. 
In the AUI mode, the SQE function is performed 
by the external transceiver. 


RECEIVE FUNCTIONS 
Receive Drivers 


Differential signals received off the twisted-pair 
network or AUI cable are directed to the internal 
clock recovery circuit prior to being decoded for 
the MAC. 


Manchester Decoder and Clock Recovery 


The PHY performs timing recovery and 
Manchester decoding of incoming differential 
signals in 1OBASE-T or AUI modes, with its built- 
in phase-lock loop (PLL). The decoded (NRZ) 
data, RXD, and the recovered clock, RXCLK, 
becomes available to the MAC, typically within 9 
bit times (5 for AUI) after the assertion of nCRS. 
The receive clock, RXCLK, is phase-locked to the 
transmit clock in the absence of a received signal 
(idle). 


Squelch Function 


The integrated smart squelch circuit employs a 
combination of amplitude and __ timing 
measurements to determine the validity of data 
received off the network. It prevents noise at the 
differential inputs from falsely triggering the 
decoder in the absence of valid data or link test 
pulses. Signal levels below 300mV (180mV for 
AUI) or pulse widths less than 15ns at the 
differential inputs are rejected. Signals above 
585mV (300mV for AUI) and pulse widths greater 
than 30ns will be accepted. When using the 
extended cable mode with 10BASE-T media 
which extends beyond the standard limit of 100 
meters, the squelch level can optionally be set to 


reject signals below 180mV and accept signals 
above 300mV. If the input signal exceeds the 
squelch requirements, the carrier sense output, 
nCRS§, is asserted. 


Reverse Polarity Function 


In the 10BASE-T mode, the PHY monitors for 
receiver polarity reversal due to crossed wires and 
corrects by reversing the signal internally. 


Collision Detection Function 


In the 10BASE-T mode, a collision state is 
indicated when’ there’ are _— simultaneous 
transmissions and receptions on the twisted pair 
link. During a collision state, the nCOLL signal is 
asserted. If the received data ends and 
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the transmit control signal is still active, the 
transmit data is sent to the MAC within 9 bit times. 
The nCOLL signal is de-asserted within 9 bit 
times after the collision terminates. In the AUI 
mode, the external transceiver sends a 10MHz 
signal to the PHY upon detection of a collision. 


Link Integrity 


The PHY test for a faulty twisted-pair link. In the 
absence of transmit data, link test pulses are 
transmitted every 16+/-8ms after the end of the 
last transmission or link pulse on the twisted pair 
medium. If neither valid data nor link test pulses 
are received within 10 to 150ms, the link is 
declared bad and both data transmission as well 
as the operational loopback function are disabled. 
The Link Integrity function can be disabled for 
pre-10BASE-T twisted-pair networks. 


BOARD SETUP INFORMATION 


The following parameters are obtained from the 


EEPROM as board setup information: 


ETHERNET INDIVIDUAL ADDRESS 
I/O BASE ADDRESS 

ROM BASE ADDRESS 

8/16 BIT ADAPTER 

10BASE-T or AUI INTERFACE 
INTERRUPT LINE SELECTION 


All the above mentioned values are read from 
the EEPROM upon hardware reset. Except for 
the INDIVIDUAL ADDRESS, the value of the 
IOS switches determines the offset within the 
EEPROM for these parameters, in such a way 
that many identical boards can be plugged into 
the same system by just changing the IOS 
jumpers. 


In order to support a software utility based 
installation, even if the EEPROM was never 
programmed, the EEPROM can be written using 
the LAN91C96. One of the IOS combination is 
associated with a fixed default value for the key 
parameters (I/O BASE, ROM _ BASE, 
INTERRUPT) that can always be used 
regardless of the EEPROM based value being 
programmed. This value will be used if all IOS 
pins are left open or pulled high. 


The EEPROM is arranged as a 64 x 16 array. 
The specific target device is the 9346 1024-bit 
Serial EEPROM. All EEPROM accesses are 
done in words. All EEPROM addresses shown 
are specified as word addresses. 
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EEPROM WORD 
REGISTER ADDRESS 


Configuration 


IOS Value * 4 
Register 


Base Register IOS Value *4) + 1 


INDIVIDUAL ADDRESS — 20-22 hex 

If IOS2-0 = 7, only the INDIVIDUAL ADDRESS is 
read from the EEPROM. Currently assigned 
values are assumed for the other registers. These 
values are default if the EEPROM read operation 
follows hardware reset. 


The EEPROM SELECT bit is used to determine 
the type of EEPROM operation: a) normal or b) 
general purpose register. 


a) NORMAL EEPROM OPERATION - EEPROM 
SELECT bit = 0 


On EEPROM read operations (after reset or after 
setting RELOAD high) the CONFIGURATION 
REGISTER and BASE REGISTER are updated 
with the EEPROM values at locations defined by 
the 1OS2-0 pins. The INDIVIDUAL ADDRESS 
registers are updated with the values stored in the 
INDIVIDUAL ADDRESS area of the EEPROM. 


On EEPROM write operations (after setting the 
STORE bit) the values of the CONFIGURATION 
REGISTER and BASE REGISTER are written in 
the EEPROM locations defined by the lOS2-0 
pins. 


The three least significant bits of the CONTROL 
REGISTER (EEPROM SELECT, RELOAD and 
STORE) are used to control the EEPROM. Their 
values are not stored nor loaded from the 
EEPROM. 


b) GENERAL PURPOSE REGISTER - 
EEPROM SELECT bit = 1 


On EEPROM read operations (after setting 
RELOAD high) the EEPROM word address 
defined by the POINTER REGISTER 6 least 
significant bits is read into the GENERAL 
PURPOSE REGISTER. 


On EEPROM write operations (after setting the 
STORE bit) the value of the GENERAL 
PURPOSE REGISTER is written at the 
EEPROM word address defined by the 
POINTER REGISTER 6 least significant bits. 


RELOAD and STORE are set by the user to 
initiate read and write operations respectively. 
Polling the value until read low is used to 
determine completion. When an EEPROM 
access is in progress the STORE and RELOAD 
bits of CTR will read-back as both bits high. No 
other bits of the LAN91C96 can be read or 
written until the EEPROM operation completes 
and both bits are clear. This mechanism is also 
valid for reset initiated reloads. 


Note: If no EEPROM is connected to the 
LAN91C96, the ENEEP pin should be grounded 
and no accesses to the EEPROM will be 
attempted. Configuration, Base and Individual 
Addresses assume their default values upon 
hardware reset and the CPU is responsible for 
programming them for their final value. 


DIAGNOSTIC LEDs 
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The following LED drive signals are available for 
diagnostic and installation aid purposes: 


nTXLED - Activated by transmit activity. 


nBSELED - Board select LED. Activated when the 
board space is accessed, namely on accesses to 
the LAN91C96 register space or the ROM area 
decoded by the LAN91C96. The signal is 
stretched to 125 msec. 


nRXLED - Activated by receive activity. 
nLINKLED - Reflects the link integrity status. 
BUS CLOCK CONSIDERATIONS 


The arbiter exploits the sequential nature of the 
CPU accesses to provide a very fast access time. 
Memory bandwidth considerations will have an 
effect on the CPU cycle time but no effect on 
access time. 


For normal 8MHz, 10MHz, and 12.5MHz ISA 
buses, as well as EISA normal cycles, the 
LAN91C96 can be accessed without negating 
ready. 


See Arbitration Considerations in Functional 
Description of the Blocks for more details. 


68000 BUS INTERFACE 


The LAN91C96 enters the 68000 interface mode 
when nlORD and nliOWR are asserted 
simultaneously. Once the two are asserted 
together, the only way to return to the ISA 
interface is by hard resetting the chip. Notice 
that the chip is required to power up in ISA mode 
to use the 68000 interface. 

For the first chip access, the first transfer (to the 
LAN91C96) must be a write. The LAN91C96 
uses this write to confirm the 68000 mode. An 
attempted read may return incorrect data. The 
LAN91C96 responds to addresses per the base 
address register contents (as in ISA mode). 
Notice that the worst case access time for the 


first cycle is the same as that for ISA or 
PCMCIA modes. 


The following is the Motorola 68000 Processor 
and the LAN91C96 pin mapping: 


e DS, LDS, or UDS to nlIORD/xDS 
e ~=R/nW to nlOWR/R/nW 
e ~=nAS to nAEN/nAS 
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68000 Address<23:1> to 91C96 Address 
Bus 

DATA to DATA (Upper and lower bytes 
swapped) 

Interrupt (if used) to INTO 


The following signals MUST be pulled as stated: 


LAN91C96 Address bit 0 tied low 

LAN91C96 nSBHE input tied low 

All INTx must have a 1KQ to 10KQ pull-up to 
keep the line high while the drivers are tri- 
stated 


WORD ADDRESS 


16 BITS 


Oh 


CONFIGURATION REG. 


th 


BASE REG. 


CONFIGURATION REG. 


BASE REG. 


CONFIGURATION REG. 


BASE REG. 


CONFIGURATION REG. 


BASE REG. 


CONFIGURATION REG. 


BASE REG. 


CONFIGURATION REG. 


BASE REG. 


CONFIGURATION REG. 


BASE REG. 


FIGURE 19 - 64 X 16 SERIAL EEPROM MAP 
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OPERATIONAL DESCRIPTION 


MAXIMUM GUARANTEED RATINGS* 


Operating: Temperature Rang és: tote niotenasidennnanndudnaddndadaadsune ads 0°C to 70°C 
Storage Temperature RANQe 0... eeccceesceseeseceeeeeceeeeaeeaeeaesaeeaeeaeeaesaeeaeeaesaesaeeaeeaeeaeeaesaeeaeeaeeas -55°C to +150°C 
Lead Temperature Range (Soldering, 10 SCCONAS) ...... eee eeeeseeeeeeseeeeeeeeeeaeeeeeeaeeeaeeeeeeaeeeaeeeneeeneeeaeeaees +325°C 
Positive Voltage on any pin, with respect to GrOUNd ......eeeceeceeceeeeeeeeeeeeeeeeeeeeeeeeeeeesesetieeieseeaeeaes Voc + 0.3V 
Negative Voltage on any pin, with respect to GroUNd ...... ee eececeeceeeeeeeeeeeeeeeeeeeeeeeeeesneeeesetesieseseeneeeeats -0.3V 
MAXIMUM G0nnivits ive ive ian an hie elas ia aes a ee +7V 


*Stresses above those listed above could cause permanent damage to the device. This is a stress rating 
only and functional operation of the device at any other condition above those indicated in the operation 
sections of this specification is not implied. 


Note: When powering this device from laboratory or system power supplies, it is important that the 
Absolute Maximum Ratings not be exceeded or device failure can result. Some power supplies exhibit 
voltage spikes on their outputs when the AC power is switched on or off. In addition, voltage transients on 
the AC power line may appear on the DC output. If this possibility exists, it is suggested that a clamp 
circuit be used. 
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DC ELECTRICAL CHARACTERISTICS 
(Ta =0°C to 70°C, Vcc = +5.0 V + 10%, or Vcc = +3.3 V + 10% as noted for Revisions E and later) 


| SS PARAMETER —_—=«| SYMBOL| MIN | TYP | MAX | UNITS | COMMENTS | 


Input Voltage Levels for Vcc = 5.0V 


| Type Input Buffer 
Low Input Level TTL Levels 
High Input Level 2.0 


IS Type Input Buffer 


Low Input Level Viuis 0.8 Vv Schmitt Trigger 
High Input Level Vinis 2.2 Vv Schmitt Trigger 
Schmitt Trigger Hysteresis Vuys 250 mV 

Icik Input Buffer 

Low Input Level Vitck 0.4 V 

High Input Level Vink 3.3 V 


Input Voltage Levels for V.c = 3.3V_ (Revisions E and later) 
| Type Input Buffer 


Low Input Level Vin 0.8 V 


High Input Level Vint 2.0 V 
IS Type Input Buffer 


Low Input Level Schmitt Trigger 


High Input Level : Schmitt Trigger 


Schmitt Trigger Hysteresis 
Icik Input Buffer 


Low Input Level ViLck 0.3 V 


High Input Level Vink 3.3 Vv 


Input Leakage for Vcc = 5.0V 
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| SS PARAMETER | SYMBOL| MIN | TYP | MAX | UNITS | COMMENTS | 


Input Leakage 

(All | and IS buffers except pins with 

pullups/pulldowns) 

Low Input Leakage pA 
High Input Leakage HA 


Input Leakage 

(All | and IS buffers except pins with 
pullups/pulldowns) 

Low Input Leakage 


High Input Leakage 


Input Current for Vcc = 5.0V 


ns tell Ngelnen 
Input Current Ii -150 | -50 uA Vin =0 


eee ea 
Input Current iy +50 | +150 pA Vin = Voc 


Input Current for Vcc = 3.3V (Revisions E and later) 


ie lal. Weal | 
Input Current Ii -100 | -50 uA Vin =0 
aay Leas staal ened | 
Input Current IH +50 | +100 uA Vin = Voc 


Output Voltage for Vcc = 5.0V 
1/04 Type Buffer 


Low Output Level ’ lo.=4mA 


High Output Level : lon = -2 MA 


Output Leakage Vin = 0 to Voc 
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PARAMETER SYMBOL 


1/024 Type Buffer 
Low Output Level 
High Output Level 


Output Leakage 
024 Type Buffer 


Low Output Level 
High Output Level 


Output Leakage 
O4 Type Buffer 


Low Output Level 
High Output Level 


Output Leakage 
OD16 Type Buffer 


Low Output Level 


Output Leakage 
0162 Type Buffer 


Low Output Level 
High Output Level 


Output Leakage 
OD24 Type Buffer 


Low Output Level 


Output Leakage 


ILEAK 
ILEAK 


ILEAK 
ILEAK 


ILEAK 
ILEAK 


UNITS 


lo. = 24 mA 
lon =-12 mA 


Vin = 0 to Voc 


lo. = 24 mA 
lon =-12 mA 


Vin = 0 to Voc 


lo. =4mA 
loo =-2 MA 


Vin= Oto Vcc 


lo. =16MmA 


Vin= Oto Vcc 


lo. =16mA 
loo =-2 MA 


Vin= Oto Vcc 


lo. =24mA 


Vin= Oto Vcc 


Output Voltage for V.c = 3.3V (Revisions E and later) 
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PARAMETER SYMBOL 


1/04 Type Buffer 
Low Output Level 
High Output Level 


Output Leakage 
1/024 Type Buffer 


Low Output Level 
High Output Level 


Output Leakage 
O24 Type Buffer 


Low Output Level 
High Output Level 


Output Leakage 
O4 Type Buffer 


Low Output Level 
High Output Level 


Output Leakage 
OD16 Type Buffer 


Low Output Level 


Output Leakage 
0162 Type Buffer 


Low Output Level 
High Output Level 


Output Leakage 
OD24 Type Buffer 


Low Output Level 


Output Leakage 


ILEAK 
ILEAK 
ILEAK 


ILEAK 
ILEAK 


ILEAK 


VoL 


ILEAK 


0.5 


-10 +10 
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lo. =2mA 
lon =-1 mA 


Vin = 0 to Voc 


lo. =16mA 
lon = -6 MA 


Vin = 0 to Voc 


lo. =12mA 
loo = -6 MA 


Vin = 0 to Voc 


lo. =2mA 
loo =-1 MA 


Vin= Oto Vcc 


lo. =8mA 


Vin= Oto Vcc 


lo. =8mA 
lon =-1 mA 


Vin= 0 to Vcc 


lo. =12mA 


Vin= Oto Voc 


| SC PARAMETER | SYMBOL| MIN | TYP | MAX | UNITS | COMMENTS | 


Supply Current for V.c = 5.0V 
Supply Current Active | lec | 


All outputs 
open. 


eal 


Supply Current Standby Icspy mA 


Supply Current for V.-. = 3.3V (Revisions E and later) 

Supply Current Active loc 20 64 mA All outputs 
open. 

Supply Current Standby IcsBy 1.5 mA 

XTAL2 Output Drive for Vcc = 5.0V 


XTAL2 Output Drive High | lcxow | = | TBD | | mA Td 


XTAL2 Output Drive Low | eee | TBD = | mAs 


XTAL2 Output Drive for Vcc = 3.3V (Revisions E and later) 


XTAL2 Output Drive High | texon | | 6 | | mA @2AV 
XTAL2 Output Drive Low | doxe | | 3 | mA OAV 
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CAPACITANCE Ta = 25°C; fc = 1MHz; Voc = 5V, or Voc = +3.3V for Revisions E and later 


XTAL1 under test tied to AC 
i i cl 
XTAL2 


Input Capacitance | Cw | | 10 |p 
[Output Capacitance | Cour =| | | 20 | 


Voc = 5V +/- 10% 
[| SSSCPARAMETER—“‘COC‘*LSOMIN: | 
10BASE-T 
Receiver Threshold Voltage a a | ae eee ae 
Receiver Common Mode Range ee 2 


a ae 
Transmitter Output: Voltage +2 +2.5 +3 V 
Source Resistance 10 ohms 
| 
atk | 


Transmitter Output DC Offset nS | 
Transmitter Backswing Voltage to Idle Ee 0 
Differential Input Voltage +0585 | | + #J| vf 


| 60 
180 
|ReceiverCommonModeRange | CT 
| Transmitter Backswing Voltagetoldie | 


Differential Idle Voltage (measured 8.0 us after 
last positive transition of data frame 


a 
| 
Output Short Circuit (to Voc or GND) Current | 
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Voc = 3.3V +/- 10% for Revisions E and later 


PARAMETER | MIN | TYP | MAX | UNITS 
10BASE-T 
Receiver Threshold Voltage =)» es 
Receiver Squelch | TBD [| TBD | TBD [| m_ | 
Receiver Common Mode Range a 


Transmitter Output: Voltage TBD 
Source Resistance se ms 


Transmitter Output DC Offset po TBD 

Transmitter Backswing Voltage to Idle CTC“ ;™*C;*C*ésL'=SC§wsTi'‘D:—Csd|sss Vi 

Differential Input Voltage | map | CT TBD OT CU 
AUI 


[Receiver Threshold Voltage | | TBD OT TT 
[ReceiverSquelch | TBD OT TBD OT TBD | mV 
a 
[Transmitter Output Voltage (R=780) | TBD | TBD | TBD | SV 
a es ee eee 
[Input Differential Voltage | TBD OT | TBD TCV 
| Output Short Circuit (to Voc orGND) Current | | | TBD Tm 


Differential Idle Voltage (measured 8.0 us after TBD mV 
last positive transition of data frame 


CAPACITIVE LOAD ON OUTPUTS 


nlOCS16, IOCHRDY 240 pF 
INTRO-3 120 pF 
All other outputs 45 pF 
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TIMING DIAGRAMS 


63 


t60 -*| | Pa ee = kK t61 
A0-9,A15 aK valid ; valid ee 
163 
160 -| <—*| 
nREG ~ \ / 
kK 164 | 
ncE1 ——\ 
67 
nWE / 
nOE \ / 
——~ t59 
"| 158 —— 165 
7 valid} vid 
Parameter min typ max units 
157 Write Data Setup to nWE Rising 30 ns 
158 Write Data Hold after nWE Rising 9 ns 
159 nOE Low to Valid Data 40 ns 
t60 Address, nREG Setup to nWE Active 25 ns 
t61 Address, nREG Hold after nOE Inactive 15 ns 
t62 Address, nREG Setup to nOE Active 25 ns 
t63 Address, nREG Hold after Control Inactive 15 ns 
t64 nCE1 Setup to nWE Rising 60 ns 
t65 nCE1 Low to Valid Data 0 50 ns 


FIGURE 20 - CARD CONFIGURATION REGISTERS - READ/WRITE-PCMCIA MODE (A15=1) 
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A0-15 \, a eee 
AEN,nSBHE  \ — VALID ADDRESS VALID ADDRESS 


nlOCS16 


a pS — > {6 2 
/ \/vaup pata \ Z \/vauip pata, 2 
\ /\ our \ ' / 


Parameter 


Address, nSBHE, AEN Setup to Control Active 
Address, nSBHE, AEN Hold after Control 
Inactive 

nlORD Low to Valid Data 

nlORD High to Data Floating 

A4-A15, AEN Low, BALE High to nlOCS16 
Low 

Cycle time* 


BALE Tied High 

IOCHRDY not used - t20 has to be met 

*Note: The cycle time is defined only for consecutive accesses to the Data Register. These 
values assume 

that IOCHRDY is not used. 


FIGURE 21 - ISA CONSECUTIVE READ CYCLES 
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A0-9,A1i5 9 valid 


nCE1,nCE2 
« t20 7 
nlORD \ 
—163—+ 
DO-15 { valid } }- 
— 46> r— 46> 
nINPACK \ y \ 

Parameter min typ max units 
t46 nlORD to INPACK Delay 0 35 ns 
t47 nREG Low to Control Active 5 ns 
t48 nCE1,nCE2 Setup to Control Active 5 ns 
t20 Cycle Time (No Wait States) 185 ns 
t49 nREG Hold after Control Active 0 ns 
t50 nCE1,nCE2 Hold after Control Inactive 15 ns 
{51 Address Setup to Control Active 25 ns 
t52 Address Hold after Control Inactive 15 ns 
t53 nlORD Active to Data Valid 0 40 ns 


FIGURE 22 - PCMCIA CONSECUTIVE READ CYCLES 
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A0-15 \/ \ / 
AEN, nSBHE VALID ADDRESS : _ VALID ADDRESS 


nlOCS16 


—t 13 "] = t20 


. =< 9 = al 


( VALID DATA IN ( VALID DATA >) 


Parameter 


8 Address, nSBHE, AEN Setup to Control Active 

t4 Address, nSBHE, AEN Hold after Control 
Inactive 

t7 Data Setup to nlIOWR Rising 

8 Data Hold after nIOWR Rising 

15 A4-A15, AEN Low, BALE High to nlOCS16 
Low 

120 Cycle time* 


BALE Tied High 
IOCHRDY not used - t20 has to be met 


*Note: The cycle time is defined only for consecutive accesses to the Data Register. These values assume 
that IOCHRDY is not used. 


FIGURE 23 - ISA CONSECUTIVE WRITE CYCLES 
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151 
| 147 
>| 148 


A0-9,A15 


nREG 


nCE1,nCE2 


Parameter 


nREG Low Setup to Control Active 
nCE1,nCE2 Setup to Control Active 
nREG Hold after Control Inactive 
nCE1,nCE2 Hold after Control Inactive 
Address Setup to Control Active 
Address Hold after Control Inactive 
Cycle Time (No Wait States) 

Write Data Setup to nlIOWR Rising 
Write Data Hold after nIOWR Rising 


FIGURE 24 - PCMCIA CONSECUTIVE WRITE CYCLES 
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AQ-15 a ea, 
AEN, | VALID ADDRESS oe ae VALID ADDRESS 
nSBHE mm 


nlOCS16 (\ 


IOCHRDY 


{ VALID DATA } \ \ VALID DATA }— 


Parameter 


9 Control Active to IOCHRDY Low 
t10 IOCHRDY Low Pulse Width* 
t20 Cycle time** 


*Note: Assuming NO WAIT ST = 0 in configuration register and cycle time observed. 
““Note: The cycle time is defined only for accesses to the Data Register as follows: 
For Data Register Read - From nlORD falling to next nlIORD falling 
For Data Register Write - From nlOWR rising to next nlIOWR rising 


FIGURE 25 - ISA CONSECUTIVE READ AND WRITE CYCLES 
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A0-15 


(say XXX XXX \ VALID ADDRESS 
AEN, ~~ es 


nSBHE 
nlOCS16 


IOCHRDY 


19/—4- 


\/ VALID DATA ° 
OUT / 


Parameter 


t9 Control Active to IOCHRDY Low 
t18 IOCHRDY Width when Data is Unavailable at 
Data Register 


t19 Valid Data to IOCHRDY Inactive 


IOCHRDY is used instead of meeting t20 and t43. 
"No Wait St' bit is 1 - IOCHRDY only negated if needed and only for Data Register access. 


FIGURE 26 - DATA REGISTER SPECIAL READ ACCESS 
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AO-15) \AAAAANAAAA/ 
asay YY XXX \ VALID ADDRESS 
AEN, / \/ VE \E MS V\/ VV \/ \f \ 
nSBHE 


nlOCS16 


IOCHRDY 


VALID DATA IN 


Parameter 


Control Active to I|OCHRDY Low 
IOCHRDY Width when Data Register is Full 


IOCHRDY is used instead of meeting t20 and t44. 
'No Wait St' bit is 1 - IOCHRDY only negated if needed and only for Data Register access. 


FIGURE 27 - DATA REGISTER SPECIAL WRITE ACCESS 
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VALID ADDRESS 


VALID DATA OUT 


Parameter min 


Address, nSBHE, AEN Setup to Control Active 25 
nlORD Low to Valid Data 

Data Setup to nlIOWR Rising 30 
Data Hold after nIOWR Rising 9 


units 


ns 
ns 
ns 
ns 


FIGURE 28 - 8-BIT MODE REGISTER CYCLES 
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nAS(nAEN) 


ADD 


xDS,LDS,UDS (nlIORD) 


R/nW(nlOWR) | / 


FIGURE 29 - 68000 READ TIMING 


| MIN, |) TYP) |) =OMAX, [| OUNIT, =| COMMENTS 
| tt f oC nsec | R/nW asserted before nAS | 
| 2 | 45 | CTT nsec | nASassertiontime 
| #3 | 15 | CC nsec | Address setup time 
| t4 | 10) | CCT nsec | Address holdtime 


| ts [| oOo vf) nsec __| nS to xDS deassertion delay __| 
| t6 | 45 | | ST nsec | xDS assertiontime 
| t7 | 10 | {| nsec __| Data setup time (Access time) __| 
| t9 [| oO ||US nsec | Dataholdtime 
| to | 75 hd] CCT CTs __| Consecutive reads cycle time _| 
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nAS (nAEN) 


ADD 


xDS,LDS,UDS (nlORD) 


tt 


R/nW (nlOWR) | 


DATA 


FIGURE 30 - 68000 WRITE TIMING 


| MIN’ | TYP | MAX | UNIT | COMMENTS 
| tt f oo fT ht) nsec | R/nW assertion beforenAS 
| 2 | 30 | | {nsec |nASassertiontime 
| ts | 15 [| | [nsec | Addresssetuptime 
| t4 | 10 | | {nsec | Addressholdtime 


| te | 15 | CT nsec nAStoxDS 
| t6 | o | | {nsec | xDS deassertion delay to nAS deassertion | 
| tz | 15 | CUT nsec | xDSassertiontime 
| te | 10 | | {nsec | Datasetuptime 
| t9 | 70 [| | [nsec | Dataholdtime 
| tio | 60 | | [nsec | Cycletime 
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\/ 
\ 


A0-19 ) ADDRESS VALID x 
= - i =< —r 4 < 
nMEMRD / 
aa) 2 as eae EKER 
— —w| {16 2 
: Fr 17 eS 
nROM \ / 
Parameter min typ max units 
3 Address Setup to Control Active 10 ns 
t4 Address Hold after Control Inactive 20 ns 
t16 nMEMRD Low to nROM Lowi(Internal) 0 20 ns 
t17 nMEMRD High to nROM High(Internal) 35 ns 


BALE tied high 


FIGURE 31 - EXTERNAL ROM READ ACCESS 
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AO-15, 


nSBHE eee veep eae OX XX XMS 100 wv, V/ XX 
ie 


\ 


BALE 


nlOCS16 


Parameter 


t1 Address, nSBHE Setup to BALE Falling 

t2 Address, nSBHE Hold after BALE Falling 

t3 Address, nSBHE, AEN Setup to Control Active 
t4 AEN Hold after Control Inactive 

t15 A4-A15, AEN Low, BALE High to nlOCS16 Low 
tS BALE Pulse Width 


t4 not needed. nlOCS16 not relevant in 8-bit mode. 


FIGURE 32 - ISA REGISTER ACCESS WHEN USING BALE 
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nMEMRD 


Parameter 


Address Setup to BALE Falling 
Address Hold after BALE Falling 
Address Setup to Control Active 
nMEMRD Low to nROM Low 
nMEMRD High to nROM High 


FIGURE 33 - EXTERNAL ROM READ ACCESS USING BALE 
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Parameter 


t21 EESK Falling to EECS Changing 


t68 EESK Falling to EEDO Changing 


9346 is typically the serial EEPROM used. 


FIGURE 34 - EEPROM READ 
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Uy t70 


= t69 


Parameter i units 


t69 EESK Falling to EECS Changing ns 
t70 EESK Falling to EEDO Changing ns 


9346 is typically the serial EEPROM used. 


FIGURE 35 - EEPROM WRITE 
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valid valid 


Parameter 


nWE to nFWE Delay 
Address, nREG, nCE1 Delay to nFCS 


FIGURE 36 - PCMCIA ATTRIBUTE MEMORY READ/WRITE (A15=0) 
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Parameter 


t22 TXD, nTXEN Delay from TXCLK Falling 


FIGURE 37 - EXTERNAL ENDEC INTERFACE - START OF TRANSMIT 
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~<_ 


t— 124—e|/ 


Parameter 


nCRS, RXD Setup to RXCLK Falling 
nCRS, RXD Hold after RXCLK Falling 


FIGURE 38 - EXTERNAL ENDEC INTERFACE - RECEIVE DATA 
(RXD SAMPLED BY FALLING RXCLK) 
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TPETXP 


TPETXN 


TPETXDN 


TPETXDP 


AUI DRIVERS 


Parameter 


TPETXP to TPETXN Skew 
TPETXP(N) to TPETXDP(N) Delay 
TPETXDN to TPETXDP Skew 
TXP to TXN Skew 


units 


ns 
ns 
ns 
ns 


FIGURE 39 - DIFFERENTIAL OUTPUT SIGNAL TIMING (10BASE-T AND AUI) 
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first bit decoded 
nCRS 
(internal) 


TPERXP(N) 


a_i 
first bit decoded 


nCRS 
(internal) 


Parameter 


Noise Pulse Width Reject (AUI) 

Carrier Sense Turn On Delay (AUI) 

Noise Sense Pulse Width Reject (10BASE-T) 
Carrier Sense Turn On Delay (10BASE-T) 


FIGURE 40 - RECEIVE TIMING - START OF FRAME (AUI AND 10BASE-T) 
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last bit 


TPERXP 
TPERXN 


nCRS 
(internal) 


Parameter 


Receiver Turn Off Delay 


FIGURE 41 - RECEIVE TIMING - END OF FRAME (AUI AND 10BASE-T) 
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TPETXP 
TPETXN 


last bit 


Parameter 


Transmit Output High to Idle in Half-Step Mode 


Transmit Output High before Idle in Half-Step 
Mode 


FIGURE 42 - TRANSMIT TIMING - END OF FRAME (AUI AND 10BASE-T) 
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COL 
(internal) 


Parameter 


Collision Turn On Delay 
Collision Turn Off Delay 


FIGURE 43 - COLLISION TIMING (AUI) 
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POINTER S DATA 
REGISTER ye 


ADDRESS é ae 


REGISTER 


IOCHRDY/ 
nWAIT (Z) 


| Parameter 


t44 Pointer Register Reloaded to a Word of Data 
Prefetched into Data Register 


Note: If t44 is not met, IOCHRDY will be negated for the required time. This parameter can be ignored if 
IOCHRDY is connected to the system. 


FIGURE 44 - MEMORY READ TIMING 
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| NAME | DESCRIPTION, 


tR, tF Clock Rise Time/Fall Time 


Xtal1 Startup time (from 1.6v of Vcc 
rising 


leo Xtal1 Capture Range (Xtal1 frequency 
| 


variation 


Xtal Internal feedback resistor 


DATA POINTER 
feo peee REGISTER REGISTER 


Parameter 


t45 Last Access to Data Register to Pointer 
Reloaded 


FIGURE 46 - MEMORY WRITE TIMING 


134 


Millimeters Inches 


MIN MAX MAX 
2.80 3.15 124 Notes: 
0.1 0.45 ‘ 018 1) Coplanarity is 0.100mm (.004") maximum. 
257 2.87 113 2) Tolerance on the position of the leads is 
33.4 24.15 951 0.200mm (.008") maximum. 
19.9 20.1 ; 791 3) Package body dimensions D1 and E1 do not 
174 18.15 715 include the mold protrusion. Maximum mold 

: - - protrusion is 0.25mm (.010"). 
i ol ; 88 4) Dimensions TD and TE are important for testing 
0.1 0.2 008 by robotic handler. Only above combinations of (1) 
0.65 0.95 037 or (2) are acceptable. 
18 2.6 A 102 5) Controlling dimension: millimeter. Dimensions 
BSC in inches for reference only and not necessarily 


te 0 les accurate. 
-016 


874 
638 
896 
662 


FIGURE 47 - 100 PIN QFP PACKAGE 
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DETAIL "A" 
we R1 


R2\ 
Gs v 

‘ Te 1° 
A t 


] SEE DETAIL "A" 


NOM 


0.10 
T.00 
16.00 
14.00 
16.00 
14.00 


0.60 
1.00 
0.50 BSC 


0.22 


Notes: 
A, Coplanarity is 0.08mm or 3.2 mils maximum. 
22, Tolerance on the position of the leads is 0.080mm maximum. 
3. Package body dimensions D1 and E1 do not include the mold protrusion. Maximum mold protrusion is 0.25mm. 
A Dimension for foot length L are measured at the gauge plane 0.25mm above the seating plane. 
2 Details of pin 1 identifier are optional but must be located within the zone indicated. 
6. Controlling dimension: millimeter 


FIGURE 48 - 100 PIN TQFP PACKAGE 
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LAN91C96 REVISIONS 


DATE 
PAGE(S) | SECTION/FIGURE/ENTRY CORRECTION REVISED 
61 I/O Space — Bank 2/ Top of RX MMU Commands changed from 3, 4 to 6, 8 07/18/00 
FIFO Packet Number See italicized text 
18 Buffer Symbols See italicized text 06/29/00 
102 DC Electrical Characteristics Updated table — see italicized text 06/29/00 
109 Timing Diagrams Figures: 20-23, 25, 29, 31-33, 35-37 06/29/00 
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